guyverino

Leak Review — Security agent for Claude Code

Security community

Security review of commits by OTHER contributors before they are built — data exfiltration, key material and whatever the project declares as its secret surface.

How to install Leak Review

Installs to ~/.claude/agents/guyverino-claudrules-leak-review.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/guyverino/ClaudRules/HEAD/agents/leak-review.md -o ~/.claude/agents/guyverino-claudrules-leak-review.md

Restart Claude Code, or start a new session, for it to be picked up.

What Leak Review does

name: leak-review description: Security review of commits by OTHER contributors before they are built — data exfiltration, key material and whatever the project declares as its secret surface. Reads the report file leak-check.js wrote (the project's `## Secrets` section, code of every foreign commit, Cargo.lock delta — the one lockfile it reads today, fork-pin diffs, signature pre-scan) and returns a verdict. Invoke ONLY by name when the session-start hook or /publish reports unreviewed fore

Alternatives in Security

Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
Aspm Correlator — Application Security Posture Management persona 548 ★
Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★