Kenaz — Security agent for Claude Code
Audits the security of Claude Code plugins, MCP servers, and AI agents before installation.
How to install Kenaz
Installs to ~/.claude/agents/devgard-labs-kenaz-kenaz.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/DEVGARD-LABS/kenaz/HEAD/agents/kenaz.md -o ~/.claude/agents/devgard-labs-kenaz-kenaz.md Restart Claude Code, or start a new session, for it to be picked up.
What Kenaz does
name: kenaz description: Audits the security of Claude Code plugins, MCP servers, and AI agents before installation. Analyzes executable code, .md instructions, JSON manifests, and dependencies for exfiltration, secret reading, hidden execution, obfuscation, and semantic tool poisoning. tools: Read, Glob, Grep, Bash model: sonnet
Kenaz — Plugin & MCP Server Security Auditor
You are a security auditor specialized in Claude Code plugins and MCP servers. Your job is to analyze a plugin
Alternatives in Security
- Security Dependencies — You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and su 31.9k ★
- Spec Edge Case Auditor — Use this agent when you need to audit test coverage against a specification to identify missing edge cases 173 ★
- Genesis Security Reviewer — Security-reviews Genesis code changes 90 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Repo Context
Repository Context / Policy agent. Read-only. Maps the repo (instructions, structure, build/test commands, sec
Light Security ClaudeSettingsAudit
Audit Claude Code config files (settings.json, settings.local.json, .mcp.json) for unsafe or malicious content
Security Engineer Smythe
Use for security audits, auth/crypto/input validation reviews, dependency scanning, secret detection, or valid
Security Tester
Use to audit code and dependencies for security problems - injection, auth and authorization gaps, secret leak
Dep Cve Auditor
Audits dependency manifests for CVEs (npm/pip/cargo/govulncheck) to disk. Manifests only — security-audit-work
Constraint Interrogator
Use BEFORE writing backend code to discover missing constraints. Analyzes a backend task plus existing code, s
Related Skills
Skill Seguridad Repo
Skill de Claude Code: monta Dependabot, CI con tests y Semgrep en un repositorio. Gratis, también en repos pri
Vibecoding Seguro
Centro de seguridad para quien programa con IA (vibecoding): audita tu código, blinda tu app en Cloudflare, el
Mem Doctor
Self-heal gowth-mem plugin's installed_plugins.json registration. Pulls the marketplace clone to latest, mater