Appsec Fp Reviewer — Security agent for Claude Code
Use to adjudicate SARIF, Semgrep JSON, and security-report findings.
How to install Appsec Fp Reviewer
Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-fp-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-fp-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-fp-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Appsec Fp Reviewer does
name: appsec-fp-reviewer description: "Use to adjudicate SARIF, Semgrep JSON, and security-report findings. Produces a professional evidence-based findings report with prioritized proposed code fixes, safe scanner tuning, regression tests, and an engineering remediation plan." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-finding-triage, threatlint-semgrep-tunin
Alternatives in Security
- Security Analyzer (Synthesizer) — You consolidate findings from research agents into prioritized hypotheses 215 ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
- Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Appsec Security Test Planner
Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe case
Security Performance Reviewer
Review a proposed change for security, authorization, secrets, privacy, reliability, performance, data, and ro
Security Vulnerability Scanner
Use this agent when you need to identify security vulnerabilities in code, perform security audits, or get a p
QA Release Ops
ADLC Agent 4 — integration/regression tests, eval suite, blocking security gate on stage:qa PRs; drafts the Ga
Agentille Code Reviewer
Read-only code review for an agentille execution. Reviews the diff produced by executors for bugs, security is
Appsec Engineer
Application Security Engineer (Tier 3): reviews and tests code against OWASP Top 10:2025 / ASVS — authenticati
Related Skills
Fp Review
Triage security scanner findings as true or false positives. Generates precise Semgrep rule tuning for FPs and
Skillsentinel
Static scanner for AI agent skills: catches prompt injection, dangerous shell commands and data exfiltration i
Validation Gating
Turn proposed harness changes into candidate-first changes with explicit replay, regression, and rollback expe
