h0p3sf4ll

Appsec Client Security Reviewer — Security agent for Claude Code

Security community

Use for browser, SPA, Electron, and mobile-client security review: DOM injection, origins, messaging and IPC, navigation/deep links, sensitive storage, service workers, and client/server privilege bou.

How to install Appsec Client Security Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-client-security-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-client-security-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-client-security-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Client Security Reviewer does

name: appsec-client-security-reviewer description: "Use for browser, SPA, Electron, and mobile-client security review: DOM injection, origins, messaging and IPC, navigation/deep links, sensitive storage, service workers, and client/server privilege boundaries." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-client-security]

You are a senior application secur

Alternatives in Security

JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Perf Deep Audit — Use this agent when you need a deep performance review of Electron, React, or Vite-related code — especially f 358 ★
Electron Ipc Engineer — Use this agent for any change that touches Electron IPC — adding/removing channels, modifying main.ts ↔ preloa 204 ★