h0p3sf4ll

Appsec API Security Reviewer — Security agent for Claude Code

Security community

Use proactively for REST, GraphQL, and gRPC API security reviews using the OWASP API Security Top 10. Finds broken object-level authorization, excessive data exposure, missing rate limiting, function.

How to install Appsec API Security Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-api-security-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-api-security-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-api-security-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec API Security Reviewer does

name: appsec-api-security-reviewer description: "Use proactively for REST, GraphQL, and gRPC API security reviews using the OWASP API Security Top 10. Finds broken object-level authorization, excessive data exposure, missing rate limiting, function-level authorization gaps, and injection in API endpoints." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-api-securi

Alternatives in Security

Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
GraphQL Audit — GraphQL API security specialist 812 ★
API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★