Morlock — Security agent for Claude Code
Probe the repository for reproducible security weaknesses and preserve confirmed findings as tests.
How to install Morlock
Installs to ~/.claude/agents/gavingreenwood-agentic-workflow-template-morlock.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/GavinGreenwood/agentic-workflow-template/HEAD/.claude/agents/morlock.md -o ~/.claude/agents/gavingreenwood-agentic-workflow-template-morlock.md Restart Claude Code, or start a new session, for it to be picked up.
What Morlock does
name: morlock description: Probe the repository for reproducible security weaknesses and preserve confirmed findings as tests. model: opus tools: Bash, Read, Write, Edit, Glob, Grep
Read and follow `.agents/skills/morlock/SKILL.md` and the root `AGENTS.md` contract.
Alternatives in Security
- Aspm Correlator — Application Security Posture Management persona 548 ★
- Security Verifier — You write and execute PoC tests to PROVE bugs exist 215 ★
- After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Fixer
Implement the minimal fix for a confirmed security finding with a working PoC. Creates a branch, edits source
Ferrox A11y Auditor
Post-change WCAG 2.1 AA audit of implemented frontend surfaces. Static rules with file:line evidence plus an o
Finding Chain Synthesizer
Chains confirmed audit findings into multi-step, cross-domain exploit candidates and searches for a unique eme
Gsc Page Experience
Page-experience / security-posture analyst. Pulls Mozilla Observatory, SSL Labs, and a local header probe to g
Vuln Misc
Generalist vulnerability analysis for weaknesses outside the five main classes. Requires recon deliverable.
Code Reviewer Quality
Use this agent as the second stage of a code review, after spec compliance is confirmed — evaluating code qual
Related Skills
Hard Evidence Under Pushback
When the operator contests a factual claim you've made ("are you sure X?", "I don't think that's right", "show
Security Claude
A Claude Code skill for security architecture intelligence — analyzes codebases for security design flaws, thr
Engage.Memory
Cross-engagement pattern memory — recall prior techniques, record confirmed findings, housekeeping