h0p3sf4ll

Appsec Iac Reviewer — Security agent for Claude Code

Security community

Use proactively for Infrastructure as Code security reviews: Terraform, CloudFormation, Pulumi, Kubernetes, Helm, Dockerfile, and docker-compose.

How to install Appsec Iac Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-iac-reviewer.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-iac-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-iac-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Iac Reviewer does


name: appsec-iac-reviewer description: "Use proactively for Infrastructure as Code security reviews: Terraform, CloudFormation, Pulumi, Kubernetes, Helm, Dockerfile, and docker-compose. Finds misconfigured IAM, open network rules, missing encryption, excessive permissions, and hardcoded secrets." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-infrastructure-revie

Alternatives in Security

Full documentation available on GitHub

View Source Repository