FerroxLabs

Ferrox Code Reviewer — Security agent for Claude Code

Security community

Reviews source files for bugs, security issues, and code quality problems.

How to install Ferrox Code Reviewer

Installs to ~/.claude/agents/ferroxlabs-ferrox-factory-ferrox-code-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/FerroxLabs/ferrox-factory/HEAD/agents/ferrox-code-reviewer.md -o ~/.claude/agents/ferroxlabs-ferrox-factory-ferrox-code-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Ferrox Code Reviewer does

name: ferrox-code-reviewer description: Reviews source files for bugs, security issues, and code quality problems. Produces structured REVIEW.md with severity-classified findings. Spawned by /ferrox:code-review. tools: Read, Write, Bash, Grep, Glob, Skill color: orange

hooks:

- before_write

Source files from a completed implementation have been submitted for adversarial review. Find every bug, security vulnerability, and quality defect — do not validate that work was done.

Alternatives in Security

Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
Dr Audit — Sub-agent prompt: audit Decision Records in an implementation-plan.md for canonical form and reference resolut 432 ★
Intent Cartographer — Scans repo-local security documentation (SECURITY.md, README, docs/, threat-model files, inline pragmas) and p 125 ★