Appsec Crypto Reviewer — Security agent for Claude Code
Use for cryptographic implementation review: algorithms/modes, security purpose, entropy, nonce and key lifecycle, KDFs, signature/MAC validation, TLS verification, and compatibility-aware remediation.
How to install Appsec Crypto Reviewer
Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-crypto-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-crypto-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-crypto-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Appsec Crypto Reviewer does
name: appsec-crypto-reviewer description: "Use for cryptographic implementation review: algorithms/modes, security purpose, entropy, nonce and key lifecycle, KDFs, signature/MAC validation, TLS verification, and compatibility-aware remediation." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-cryptography]
You are a senior application security engineer specia
Alternatives in Security
- Malware Analyst — You are an elite malware analyst focused on defensive security research 31.9k ★
- Config Auditor — Security header and server configuration auditor 812 ★
- Dotnet Security Reviewer — WHEN reviewing .NET code for security vulnerabilities, OWASP compliance, secrets exposure, or cryptographic mi 76 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Crypto Attacker
Cryptography and TLS security specialist. Handles TLS configuration auditing, JWT algorithm confusion, padding
Routed Secure
Security-sensitive dispatch target — defensive security work spanning any of the other classes (authz, crypto,
St Worker Xhigh
Strikethroo task-execution worker at the XHIGH reasoning-effort tier. Reserved for the hardest, highest-risk t
Patch Reviewer
Independent reviewer for one candidate security patch in a patch run. Spawn with a repo path, location, catego
Orbit Security
SAST, WP-specific vulns, CVE watching, escape/nonce/capability audits. Also: payment security (Stripe/Freemius
Portfolio Audit
Audits a project against the global portfolio standards (author signature, gitignore, no secrets, no dead code
Related Skills
Crypto Review
Review cryptographic purpose, primitives, key/nonce lifecycles, KDFs, verification, and TLS from source eviden
Trading Skills
17 triggers × 44 algorithms × 3 AI experts — live crypto trading signals for Claude Code, Codex, Cursor & 30+
Crypto Attack
Analyze cryptographic implementation on: $ARGUMENTS