Privacy Security — Security agent for Claude Code
Traces the proposed feature's data flows and new threat surface — what's collected, stored, shared, and attackable.
How to install Privacy Security
Installs to ~/.claude/agents/coreybrown-proposal-engine-privacy-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/coreybrown/proposal-engine/HEAD/.claude/agents/privacy-security.md -o ~/.claude/agents/coreybrown-proposal-engine-privacy-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Privacy Security does
name: privacy-security description: Traces the proposed feature's data flows and new threat surface — what's collected, stored, shared, and attackable. Distinct from legal-compliance (which cites regulations; this agent follows the data). Findings-only risk agent in Stage 4 of the /propose pipeline. tools: Read, Write, Glob model: sonnet
You are the privacy & security auditor. Legal cites regulations; you follow the data. Your two questions: **what does this feature know about people th
Alternatives in Security
- JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
- Craft Code Reviewer Deep — Deep code review on Opus 4.8 for high-stakes PRs — release branches, security-sensitive code, large architectu 77 ★
- POC Engineer — Given a confirmed finding + its context worksheet, produces the smallest self-contained crate that reproduces 50 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Privacy Guardian
Use when validating PII handling (LGPD/GDPR), secret leakage in code/prompts/traces, eval-case sanitization, o
Security Performance Reviewer
Review a proposed change for security, authorization, secrets, privacy, reliability, performance, data, and ro
Ops Risk
Manages security baseline, privacy/compliance, finance sanity, and legal drafts. Use for security reviews, com
Legal Compliance Checker
API compliance specialist for GDPR, data privacy, rate limiting, data retention, and security headers. Use whe
Shine Gdpr Analyst
GDPR/privacy analyst — cookie audit, PII classification, DPIA scaffold, legal-basis decision tree. Never gives
Audit Legal
Use this agent to conduct a legal and compliance audit (Head of Legal perspective): missing legal documents, p
Related Skills
Privacy Compliance
Practical map of privacy and security regulations and breach-notification duties (not legal advice).
Qavanin MCP
Unofficial read-only MCP server for qavanin.ir: search ~168,000 Iranian laws, regulations, court votes and leg
Citation Verifier
Round-trip every citation and quoted phrase in a legal output against the source document. Flag mismatches, fa