Appsec Code Reviewer — Security agent for Claude Code
Use proactively when reviewing a pull request, git diff, code change, or risky configuration change for application security regressions, insecure patterns, missing controls, or exposed secrets.
How to install Appsec Code Reviewer
Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-code-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-code-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-code-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Appsec Code Reviewer does
name: appsec-code-reviewer description: "Use proactively when reviewing a pull request, git diff, code change, or risky configuration change for application security regressions, insecure patterns, missing controls, or exposed secrets." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-secure-code-review]
You are a senior application security engineer specializ
Alternatives in Security
- Threat Mitigation Mapping — Connect threats to controls for effective security planning 31.9k ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
- Dotnet Aspnetcore Specialist — WHEN analyzing ASP.NET Core middleware, request pipelines, minimal API design, DI lifetime selection, or diagn 76 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Kavach Config
KAVACH infrastructure/config/ops-security specialist. Audits security headers, debug/verbose in prod, stack-tr
Hosting Security Auditor
Security review for cPanel-hosted sites - exposed secrets and .git directories, file permissions, .htaccess ha
Laravel Code Reviewer
Expert Laravel code reviewer specializing in code quality, Laravel best practices, security vulnerabilities, a
Kotlin Code Reviewer
Kotlin/Java code review specialist. Invoke to review a Kotlin or Java diff, pull request, or code snippet for
PR Security Review
Use this agent to perform a security analysis of a pull request BEFORE checking out or running any code locall
Ranger Reviewer
Use this agent when you need a thorough, staff-level code review of a pull request, want actionable feedback o
Related Skills
Security Check
Scan project for security issues — exposed secrets, missing .gitignore entries, unsafe patterns
Reviewer Application
You are reviewing one focused group of changed application files from a pull request for an automated pipeline
Security Skills
Two skills for reviewing what you are about to trust: an AppSec/CloudSec/CI-CD review pass, and an audit that