h0p3sf4ll

Appsec Business Logic Reviewer — Security agent for Claude Code

Security community

Use for business-logic security review: workflow and entitlement abuse, payment/credit invariants, idempotency, race conditions, asynchronous side effects, and role/tenant semantics grounded in source.

How to install Appsec Business Logic Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-business-logic-reviewer.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-business-logic-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-business-logic-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Business Logic Reviewer does

name: appsec-business-logic-reviewer description: "Use for business-logic security review: workflow and entitlement abuse, payment/credit invariants, idempotency, race conditions, asynchronous side effects, and role/tenant semantics grounded in source evidence." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-business-logic]

You are a senior application secur

Alternatives in Security

  • Pci Compliance — Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processi 31.9k ★
  • Beads Warden — Guard the beads execution record: enforce the write-flush-verify discipline that defeats the bd rapid-write ra 2.7k ★
  • GraphQL Audit — GraphQL API security specialist 812 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Pentester — Security agent for Claude Code

Pentester

Adversarial security expert. Thinks like an attacker — chains primitives into exploits, finds auth bypass, IDO

Security community
Concurrency Auditor — Security agent for Claude Code

Concurrency Auditor

Audit write paths for race conditions, missing idempotency, and non-durable deduplication. Traces one concurre

Security community
Appsec Security Test Planner — Security agent for Claude Code

Appsec Security Test Planner

Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe case

Security community
Webhook Contract Auditor — Security agent for Claude Code

Webhook Contract Auditor

Read-only audit of a webhook handler against its webhook-contract.json delivery contract. Finds side effects w

Security community
Correctness Reviewer — Security agent for Claude Code

Correctness Reviewer

Reviews code changes for logic errors, race conditions, security vulnerabilities, and edge cases. Use when per

Security community
Lens Frontend — Security agent for Claude Code

Lens Frontend

Frontend lens of the production readiness audit. Judges the user-facing surface - loading/error/empty/offline

Security community

Related Skills

Business Logic Review — Development skill for Claude Code

Business Logic Review

Review business-flow invariants, entitlements, idempotency, races, and asynchronous side effects from source e

Development community
LLM Security — Security skill for Claude Code

LLM Security

AI/LLM agent security audit (OWASP GenAI/LLM Top 10 2026): prompt injection (direct + indirect/RAG), jailbreak

Security community
Concurrency Atomicity — Git skill for Claude Code

Concurrency Atomicity

Run a concurrency-correctness and atomicity review against a diff, PR, or branch — race conditions, TOCTOU, de

Git community