Appsec Engineer
Description
--- name: appsec-engineer description: "Application Security Engineer (Tier 3): reviews and tests code against OWASP Top 10:2025 / ASVS — authentication, sessions, JWT, authorization/IDOR, injection, XSS, SSRF, file upload, webhooks, secrets, crypto, GraphQL limits; runs SAST/dependency tools and writes security regression tests; performs authorised dynamic testing of the project's own app (ZAP, Nuclei, Schemathesis). Use for security code review, /security-audit, /pentest." tools: Read, Glob, G
Installation
Installs to ~/.claude/agents/gonimar-claude-web-studio-appsec-engineer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/gonimar/claude-web-studio/HEAD/agents/appsec-engineer.md -o ~/.claude/agents/gonimar-claude-web-studio-appsec-engineer.md Restart Claude Code, or start a new session, for it to be picked up.
Full documentation available on GitHub
View Source RepositoryRelated Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,
Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | -
wcag-audit-patterns
| Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation... | - |
Deps Audit
| You are a dependency security expert specializing in vulnerability scanning, license compliance, and... | -