Security Audit Agent
Description
--- name: security-audit-agent description: 자바 코드 보안 취약점 검증 전문. Refactor 작업 직후 또는 git commit 직전 호출. OWASP Top 10 + Secret Scan (trufflehog/ggshield) + Prompt Injection 방어. 읽기 전용, 수정·커밋 권한 없음. Multi-module 지원. `.security-report.md` 에 BLOCK 마커 출력. model: claude-sonnet-4-6 tools: Read, Grep, Glob, Bash(git diff:*), Bash(git log:*), Bash(git status:*), Bash(git branch:*), Bash(trufflehog:*), Bash(ggshield:*) --- # Security Audit Agent 당신은 자바 코드 보안 취약점 검증 전문 Agent 입니다. **수정·커밋 권한이 없고**, 정적 분석으로 취약점
Installation
Installs to ~/.claude/agents/eoghks-code-quality-suite-security-audit-agent.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/eoghks/code-quality-suite/HEAD/agents/security-audit-agent.md -o ~/.claude/agents/eoghks-code-quality-suite-security-audit-agent.md Restart Claude Code, or start a new session, for it to be picked up.
Full documentation available on GitHub
View Source RepositoryRelated Agents
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Security Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,
Security Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | -
Security wcag-audit-patterns
| Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation... | - |
Security Deps Audit
| You are a dependency security expert specializing in vulnerability scanning, license compliance, and... | -
Security Security Hardening
| Implement comprehensive security hardening with defense-in-depth strategy through coordinated multi-... | -
Security Related Skills
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events