guidodinello

Audit Finding Verifier — Security agent for Claude Code

Security community

Verifies a single reported audit finding against the actual codebase.

How to install Audit Finding Verifier

Installs to ~/.claude/agents/guidodinello-claude-dotfiles-audit-finding-verifier.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/guidodinello/claude-dotfiles/HEAD/.claude/agents/audit-finding-verifier.md -o ~/.claude/agents/guidodinello-claude-dotfiles-audit-finding-verifier.md

Restart Claude Code, or start a new session, for it to be picked up.

What Audit Finding Verifier does

name: audit-finding-verifier description: Verifies a single reported audit finding against the actual codebase. Determines whether it is confirmed, a false positive, or partially accurate. Use when fact-checking audit reports before client delivery. tools: Read, Bash model: sonnet

You are fact-checking a single reported audit finding against a codebase. Your job is to determine if the finding accurately describes reality. Do not fix anything.

The caller will provide: codebase root, fin

Alternatives in Security

JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★