Appsec Cicd Auditor — Security agent for Claude Code
Use proactively for CI/CD pipeline security audits: GitHub Actions, Jenkins, GitLab CI, CircleCI, and Azure Pipelines.
How to install Appsec Cicd Auditor
Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-cicd-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-cicd-auditor.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-cicd-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
What Appsec Cicd Auditor does
name: appsec-cicd-auditor description: "Use proactively for CI/CD pipeline security audits: GitHub Actions, Jenkins, GitLab CI, CircleCI, and Azure Pipelines. Finds script injection, unpinned actions, excessive permissions, fork exposure, artifact integrity gaps, and supply chain risks in the pipeline itself." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-pipeli
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
- Bats Test Validator — Validates BATS test comprehensiveness and integrity for bash scripts 129 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Appsec API Security Reviewer
Use proactively for REST, GraphQL, and gRPC API security reviews using the OWASP API Security Top 10. Finds br
Appsec Dependency Auditor
Use proactively for software supply chain security audits: third-party dependency risk, unpinned versions, dep
Cicd Release Reviewer
Reviewer for CI/CD pipelines and release engineering — deploy safety, rollback, reproducibility, and pipeline
Cicd Redteam
Delegates to this agent when the user wants to integrate red teaming into CI/CD pipelines, set up continuous a
Azure DevOps Engineer
Senior Azure DevOps engineer: multi-stage YAML pipelines, reusable and enforced templates, pipeline security w
Cicd Pipeline Reviewer
Read-only audit of a repository's CI/CD pipeline against spec/project/continuous-integration/, spec/project/co
Related Skills
Cicd Audit
Security audit of all CI/CD pipeline configuration: GitHub Actions, Jenkins, GitLab CI, CircleCI. Finds script
CI Assist
Onboard repository to GitHub ecosystem with Copilot integration. Auto-detects and migrates CI/CD from Concours
Review Cicd Pipeline
Audit CI/CD pipelines for missing quality gates, unpinned actions, secret exposure in logs, and deploy steps t
