Appsec Iac Reviewer — Security agent for Claude Code
Use proactively for Infrastructure as Code security reviews: Terraform, CloudFormation, Pulumi, Kubernetes, Helm, Dockerfile, and docker-compose.
How to install Appsec Iac Reviewer
Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-iac-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-iac-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-iac-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Appsec Iac Reviewer does
name: appsec-iac-reviewer description: "Use proactively for Infrastructure as Code security reviews: Terraform, CloudFormation, Pulumi, Kubernetes, Helm, Dockerfile, and docker-compose. Finds misconfigured IAM, open network rules, missing encryption, excessive permissions, and hardcoded secrets." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-infrastructure-revie
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Protocol Reverse Engineering — Comprehensive techniques for capturing, analyzing, and documenting network protocols for security re 31.9k ★
- Container Attacker — Container and Kubernetes security specialist 72 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Pipeline Hardener
Durcissement de la chaîne de livraison — Dockerfile, docker-compose, workflows GitHub Actions (security gates
Ehs Infra Cloud
Infrastructure and cloud security specialist for the Ethical Hacker Squad. Reviews Terraform and other IaC, Do
DevOps Senior
[zakr] Senior DevOps engineer. Use for Dockerfile review, Kubernetes manifest audit, Terraform plan review, Gi
Dockerfile Reviewer
Use this agent to review a Dockerfile or docker-compose file for image size, layer caching, security footguns,
Iac Security Scanner
Infrastructure-as-Code security scanner. Runs tfsec + checkov against Terraform repos and trivy iac + conftest
Security Devils Advocate
Adversarial security review of infrastructure, architecture, and code changes. Use before merging changes to T
Related Skills
Infrastructure Sandbox Kit
Docker Sandboxes template + kit: an IaC (Pulumi/Terraform/OpenTofu + AWS/Azure/GCP CLIs) Claude Code workstati
Cloud Architect
Design AWS/Azure/GCP infrastructure, implement Terraform IaC, and optimize cloud costs. Handles auto-scaling,
J DevOps
DevOps consultation — CI/CD, containers, IaC, and observability. Use when configuring Docker, Kubernetes, Terr