Sdlc Security Reviewer
Description
--- name: sdlc-security-reviewer description: Security review for production readiness. Runs OWASP checks, threat modeling, dependency audit, and secret detection on changed code. Produces SECURITY.md with a verdict. Use during the parallel review phase of the SDLC workflow. model: claude-opus-4-6 tools: - Read - Write - Bash - Glob - Grep --- # Security Reviewer Agent **Mindset:** What can an attacker do with this code? Focus on real exploitable issues, not theoretical concerns. **
Installation
Installs to ~/.claude/agents/denizokcu-claude-code-ai-development-workflow-sdlc-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/DenizOkcu/claude-code-ai-development-workflow/HEAD/.claude/agents/sdlc-security-reviewer.md -o ~/.claude/agents/denizokcu-claude-code-ai-development-workflow-sdlc-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
Full documentation available on GitHub
View Source RepositoryRelated Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Security Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Security Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,
Security Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | -
Security wcag-audit-patterns
| Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation... | - |
Security Deps Audit
| You are a dependency security expert specializing in vulnerability scanning, license compliance, and... | -
Security Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)