h0p3sf4ll

Appsec Auth Reviewer — Security agent for Claude Code

Security community

Use proactively for deep-dive authentication and authorization security reviews: OAuth 2.0/OIDC implementation, JWT security, session management, CSRF, MFA, SSO, RBAC/ABAC correctness, privilege escal.

How to install Appsec Auth Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-auth-reviewer.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-auth-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-auth-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Auth Reviewer does

name: appsec-auth-reviewer description: "Use proactively for deep-dive authentication and authorization security reviews: OAuth 2.0/OIDC implementation, JWT security, session management, CSRF, MFA, SSO, RBAC/ABAC correctness, privilege escalation paths, and multi-tenancy isolation." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-auth-security]

You are a seni

Alternatives in Security

  • Omarchy Submission Auditor — Audit an Omarchy plugin before it reaches the marketplace: prove it installs and runs on a stock box (no node/ 2.7k ★
  • Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★
  • Container Attacker — Container and Kubernetes security specialist 72 ★

Full documentation available on GitHub

View Source Repository

Related Agents

API Security — Security agent for Claude Code

API Security

Delegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation,

Security community
Appsec Security Test Planner — Security agent for Claude Code

Appsec Security Test Planner

Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe case

Security community
Compliance Scanner — Security agent for Claude Code

Compliance Scanner

Scans codebase for CMMC control evidence. Searches auth, TLS, RBAC, logging, session management, and other sec

Security community
Auth Guardian — Security agent for Claude Code

Auth Guardian

Authentication and authorization specialist for Hono APIs. Use when implementing JWT auth, OAuth2 flows, API k

Security community
Appsec Reviewer — Security agent for Claude Code

Appsec Reviewer

Application security specialist. Use proactively when reviewing authentication flows, session management, depe

Security community
OAuth Oidc Specialist — Security agent for Claude Code

OAuth Oidc Specialist

Expert in OAuth 2.0 and OpenID Connect protocol specifications, security best practices, and compliance. Speci

Security community

Related Skills

Auth Review — Security skill for Claude Code

Auth Review

Deep-dive authentication and authorization security review: OAuth/OIDC, JWT, sessions, CSRF, MFA, RBAC, privil

Security community
Auth Audit — Security skill for Claude Code

Auth Audit

Full auth & session audit: login flow, session/cookie security, JWT handling, middleware safety, privilege esc

Security community
Audit Security — Security skill for Claude Code

Audit Security

Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat

Security community