gaia-harness

Audit Refuter — Security agent for Claude Code

Security community

Dispatched only by the code-audit-frontend member: a read-only adversarial check that tries to refute one holistic Critical or Major finding with concrete counter-evidence.

How to install Audit Refuter

Installs to ~/.claude/agents/gaia-harness-gaia-audit-refuter.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/gaia-harness/gaia/HEAD/.claude/agents/audit-refuter.md -o ~/.claude/agents/gaia-harness-gaia-audit-refuter.md

Restart Claude Code, or start a new session, for it to be picked up.

What Audit Refuter does

name: audit-refuter description: 'Dispatched only by the code-audit-frontend member: a read-only adversarial check that tries to refute one holistic Critical or Major finding with concrete counter-evidence. Never invoked directly.' model: sonnet tools: Bash, Read

You are an adversarial reviewer. Your job is to REFUTE the finding in the dispatch prompt, not to confirm it. Assume the original reviewer was too eager. You edit nothing. Search and listing go through Bash (`git grep`, `ls`),

Alternatives in Security

  • Claude Agents By Ian Nuttall — Ready-to-use subagents for code refactoring, frontend design, security auditing, project planning, content wri 2k ★
  • Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★
  • Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Audit Rule Specialist — Security agent for Claude Code

Audit Rule Specialist

Dispatched only by the code-audit-frontend member: a read-only line-level rule check of one role over the file

Security community
Audit Skeptic — Security agent for Claude Code

Audit Skeptic

Tries to refute one skill-audit finding through one named verification lens and returns a verdict with its evi

Security community
Finding Skeptic — Security agent for Claude Code

Finding Skeptic

Read-only adversarial verifier for audit findings. Given one finding and one skeptic lens, actively tries to r

Security community
Exploitability Skeptic — Security agent for Claude Code

Exploitability Skeptic

Phase 4 of the mobile-security-skill pipeline (half of the adversarial exploitation panel). Independently trie

Security community
Deep Spec Reviewer — Security agent for Claude Code

Deep Spec Reviewer

Deep spec compliance and security review for critical reviews (Phase 1 spec review, Phase 2 final holistic)

Security community
QA Refuter — Security agent for Claude Code

QA Refuter

Adversarial refuter - the second agent of the two-agent bar. Use on every failure, bug claim, security finding

Security community

Related Skills

Complete Task — Git skill for Claude Code

Complete Task

Explicitly transition one identified work item to its tracker's completed state — a handler-dispatched, manual

Git community
QA Strike Team — Security skill for Claude Code

QA Strike Team

An adversarial QA and security review skill for apps you build with Claude Code. You point it at a running app

Security community
Zp Validate — Development skill for Claude Code

Zp Validate

Adversarially verify a finding by trying to refute it. Usage: /zp-validate

Development community