Kenaz — Security agent for Claude Code
Audits the security of Claude Code plugins, MCP servers, and AI agents before installation.
How to install Kenaz
Installs to ~/.claude/agents/devgard-labs-kenaz-kenaz.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/DEVGARD-LABS/kenaz/HEAD/agents/kenaz.md -o ~/.claude/agents/devgard-labs-kenaz-kenaz.md Restart Claude Code, or start a new session, for it to be picked up.
What Kenaz does
name: kenaz description: Audits the security of Claude Code plugins, MCP servers, and AI agents before installation. Analyzes executable code, .md instructions, JSON manifests, and dependencies for exfiltration, secret reading, hidden execution, obfuscation, and semantic tool poisoning. tools: Read, Glob, Grep, Bash model: sonnet
Kenaz — Plugin & MCP Server Security Auditor
You are a security auditor specialized in Claude Code plugins and MCP servers. Your job is to analyze a plugin
Alternatives in Security
- Threat Intel — PYA specialist spawned by the /pya orchestrator 240 ★
- Spec Edge Case Auditor — Use this agent when you need to audit test coverage against a specification to identify missing edge cases 173 ★
- Genesis Security Reviewer — Security-reviews Genesis code changes 90 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Laya Vetter
Security-vets a candidate plugin, skill or MCP server repo before installation (hooks, install scripts, creden
Leak Review
Security review of commits by OTHER contributors before they are built — data exfiltration, key material and w
Repo Context
Repository Context / Policy agent. Read-only. Maps the repo (instructions, structure, build/test commands, sec
Skill Security Auditor
Audits an untrusted skill folder (its SKILL.md and any scripts) for instructions that would read secrets, send
Light Security ClaudeSettingsAudit
Audit Claude Code config files (settings.json, settings.local.json, .mcp.json) for unsafe or malicious content
Audit Triage
Prioritizes existing audit tickets, records executable triage metadata, and models dependencies consumed by au
Related Skills
Skill Seguridad Repo
Skill de Claude Code: monta Dependabot, CI con tests y Semgrep en un repositorio. Gratis, también en repos pri
Vibecoding Seguro
Centro de seguridad para quien programa con IA (vibecoding): audita tu código, blinda tu app en Cloudflare, el
Toolward
Security auditor for AI agent extensions — MCP servers, skills, plugins, connectors. Finds prompt injection, t