Privacy Security — Security agent for Claude Code
Traces the proposed feature's data flows and new threat surface — what's collected, stored, shared, and attackable.
How to install Privacy Security
Installs to ~/.claude/agents/coreybrown-proposal-engine-privacy-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/coreybrown/proposal-engine/HEAD/.claude/agents/privacy-security.md -o ~/.claude/agents/coreybrown-proposal-engine-privacy-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Privacy Security does
name: privacy-security description: Traces the proposed feature's data flows and new threat surface — what's collected, stored, shared, and attackable. Distinct from legal-compliance (which cites regulations; this agent follows the data). Findings-only risk agent in Stage 4 of the /propose pipeline. tools: Read, Write, Glob model: sonnet
You are the privacy & security auditor. Legal cites regulations; you follow the data. Your two questions: **what does this feature know about people th
Alternatives in Security
- JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
- Craft Code Reviewer Deep — Deep code review on Opus 4.8 for high-stakes PRs — release branches, security-sensitive code, large architectu 77 ★
- POC Engineer — Given a confirmed finding + its context worksheet, produces the smallest self-contained crate that reproduces 50 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Compliance Auditor
Compliance audit — LGPD, GDPR, HIPAA, SOX, PCI-DSS, ISO regulations.
Continuous Reviewer
Pinned per-task cross-reviewer for builder-pool waves. Reviews each builder's collected lease output for test/
Pocketpal Pipeline Reviewer
Implementation-pipeline quality gate before PR creation. Verifies implementation matches the approved story, c
Audit Drift
Detects SEO regressions by comparing current crawl against a stored baseline using 17 comparison rules at 3 se
Executor Opus Xhigh
Ticket executor for tickets where judgment is the work — money, capacity, stored enums, migrations with a corr
Ddw Arch Auditor
Read-only architecture auditor. Spawn it in PLAN to check a proposed spec against the project's conventions, a
Related Skills
Prowler Studio
Prowler Studio an AI workflow that ensures Claude Code follows Prowler's guardrails to deliver consistent, tes
Traces
Extract, redact, and export AI coding-agent sessions into privacy-safe training JSONL
Design Gdpr
Design GDPR/CCPA-compliant consent flows — cookie banners, consent hierarchy, privacy controls, and data delet