h0p3sf4ll

Appsec Runtime Reviewer — Security agent for Claude Code

Security community

Use for read-only runtime security review: correlate authorized captures with source, distinguish header/status observations from verified vulnerabilities, and assess authentication state, deployment.

How to install Appsec Runtime Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-runtime-reviewer.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-runtime-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-runtime-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Runtime Reviewer does

name: appsec-runtime-reviewer description: "Use for read-only runtime security review: correlate authorized captures with source, distinguish header/status observations from verified vulnerabilities, and assess authentication state, deployment drift, and validation evidence." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-runtime-validation, threatlint-runtime-au

Alternatives in Security

  • Anti Reversing Techniques — AUTHORIZED USE ONLY: This skill contains dual-use security techniques 31.9k ★
  • Config Auditor — Security header and server configuration auditor 812 ★
  • Audit Deep — Deep single-subsystem audit that reasons about state over time (caches, upserts, migrations, concurrent scans) 335 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Gsc Evidence Reviewer — Security agent for Claude Code

Gsc Evidence Reviewer

Reviews a supplied SEO audit draft against supplied source observations.

Security community
Pentest Validator — Security agent for Claude Code

Pentest Validator

Optional, disabled-by-default Dynamic Security Validation agent. Interacts with a running, explicitly authoriz

Security community
Infra Platform Reviewer — Security agent for Claude Code

Infra Platform Reviewer

Reviewer for infrastructure-as-code and platform — Terraform/Bicep quality, state, containers, drift, and blas

Security community
Ext Exploit Operator — Security agent for Claude Code

Ext Exploit Operator

Executes ONE approved step from an external-pentest attack plan in an authorized engagement. Runs the specific

Security community
Appsec Threat Delta — Security agent for Claude Code

Appsec Threat Delta

Use proactively to compare a previous threat model or security report against the current repository state. Cl

Security community
Appsec Security Test Planner — Security agent for Claude Code

Appsec Security Test Planner

Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe case

Security community

Related Skills

Vibesec — Data skill for Claude Code

Vibesec

Helps write secure code by preventing common vulnerabilities including IDOR, XSS, SQL injection, SSRF, and wea

Data community
Audit Security — Security skill for Claude Code

Audit Security

Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat

Security community
Outcome Pro — Development skill for Claude Code

Outcome Pro

Assess business, product, marketing, engineering, and operational outcomes against intent using authorized agg

Development community