Review Spec Red Team — Security agent for Claude Code
Security-focused adversarial reviewer for specs.
How to install Review Spec Red Team
Installs to ~/.claude/agents/croakingtoad-correctless-review-spec-red-team.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/croakingtoad/correctless/HEAD/agents/review-spec-red-team.md -o ~/.claude/agents/croakingtoad-correctless-review-spec-red-team.md Restart Claude Code, or start a new session, for it to be picked up.
What Review Spec Red Team does
name: review-spec-red-team description: Security-focused adversarial reviewer for specs. Finds attack paths, bypass vectors, and failure modes the spec does not cover. Read-only — reviews but never modifies artifacts. tools: Read, Grep, Glob
Red Team Agent — Spec Review
Preamble
Before starting your review, read these files in order:
- `.correctless/AGENT_CONT
Alternatives in Security
- GraphQL Audit — GraphQL API security specialist 812 ★
- Spec Edge Case Auditor — Use this agent when you need to audit test coverage against a specification to identify missing edge cases 173 ★
- Blindspot — Peripheral vision audit for empirical output 130 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Paranoid Sentinel
A hyper-vigilant security code reviewer with paranoid delivery - performs thorough security analysis first, th
OS Auditor
Read-only auditor of the AI OS. Scores the 4C layers per domain, runs truth checks (routing, index, freshness,
Swe Dev Critical Systems Engineer
Audit long-lived, business-critical, regulated systems. Exposes invariants, failure modes, abstractions, and o
n8n Workflow Auditor
Use for deep technical audit of n8n workflows. Specializes in validation profiles, expression syntax gotchas,
Review Risk.Agent
Read-only security and risk reviewer. Surfaces elevated privilege, PII exposure, injection vectors, and auth b
Agentille Security Reviewer
Reviews changed code for security issues — secret leaks, injection vectors, auth bypass, unsafe deserializatio
Related Skills
0x002132 Skills Bugbounty Cloud Iam Deep
Cloud IAM red-team attack chain across AWS, Azure, GCP — focused on EXTERNAL exploitation paths and post-crede
Security Audit Review
Performs deep security audits on any codebase — finds vulnerabilities, exploits, and attack vectors. Supports
Codex Plan Review
Adversarial Codex review of a PLAN or design (not code) via the local Codex CLI. Read-only second-model challe