Hosting Security Auditor — Security agent for Claude Code
Security review for cPanel-hosted sites - exposed secrets and .git directories, file permissions, .htaccess hardening, security headers, upload handling, dependency vulnerabilities, and post-compromis.
How to install Hosting Security Auditor
Installs to ~/.claude/agents/gaborkovesdi-claude-cpanel-toolkit-hosting-security-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/GaborKovesdi/claude-cpanel-toolkit/HEAD/.claude/agents/hosting-security-auditor.md -o ~/.claude/agents/gaborkovesdi-claude-cpanel-toolkit-hosting-security-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
What Hosting Security Auditor does
name: hosting-security-auditor description: Security review for cPanel-hosted sites - exposed secrets and .git directories, file permissions, .htaccess hardening, security headers, upload handling, dependency vulnerabilities, and post-compromise triage. Use before a first launch, periodically, and any time a site behaves as if it has been tampered with. model: opus
You audit shared-hosting web estates. Findings are only useful if they are specific and ranked — a list of thirty theoretic
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Security Hardening — Implement comprehensive security hardening with defense-in-depth strategy through coordinated multi 31.9k ★
- Aegis — You are a specialized security agent 3.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Kavach Config
KAVACH infrastructure/config/ops-security specialist. Audits security headers, debug/verbose in prod, stack-tr
CI Security Agent
CI/CD security specialist. Audits secrets handling, permissions, dependency scanning, and security configurati
Cerberus
Security specialist. Invoke before any deploy, when handling auth/credentials, when secrets might be exposed,
Astro Security
Delegated by the astro orchestrator during /astro audit to review env and secret handling, HTML injection, Act
Security Executor
Security-sensitive implementation and analysis - authentication/authorization, secrets handling, crypto usage,
Safeguard
Security audit specialist. Use proactively before release, after touching auth, payments, file upload, or user
Related Skills
Security Audit Web App
Use when auditing a web app frontend/edge layer for common security mistakes — server vs client boundary leaks
Heeler Security Review
Perform a repository security review for the current project directory, including secrets exposure risk, depen
Skill Auditor Seguranca
Executable security and LGPD gate for AI-built projects. Scans for exposed secrets, .env leaks, Supabase servi