h0p3sf4ll

Appsec AI Security Reviewer — Security agent for Claude Code

Security community

Use for AI/LLM application security review: direct/indirect prompt injection, tool and agent authorization, RAG ingestion/retrieval, memory and tenant boundaries, generated output sinks, provider data.

How to install Appsec AI Security Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-ai-security-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-ai-security-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-ai-security-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec AI Security Reviewer does

name: appsec-ai-security-reviewer description: "Use for AI/LLM application security review: direct/indirect prompt injection, tool and agent authorization, RAG ingestion/retrieval, memory and tenant boundaries, generated output sinks, provider data flows, and resource budgets." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-ai-security]

You are a senior appl

Alternatives in Security

Perf Deep Audit — Use this agent when you need a deep performance review of Electron, React, or Vite-related code — especially f 358 ★
Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★
AI Code Auditor — PYA specialist spawned by the /pya orchestrator 240 ★