h0p3sf4ll

Appsec Secure Codegen Reviewer — Data & AI agent for Claude Code

Data & AI community

Use to review AI/model-generated or newly written code for insecure-by-default patterns: injection sinks, unsafe deserialization, disabled TLS verification, weak crypto, hardcoded secrets, missing aut.

How to install Appsec Secure Codegen Reviewer

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-secure-codegen-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-secure-codegen-reviewer.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-secure-codegen-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Secure Codegen Reviewer does

name: appsec-secure-codegen-reviewer description: "Use to review AI/model-generated or newly written code for insecure-by-default patterns: injection sinks, unsafe deserialization, disabled TLS verification, weak crypto, hardcoded secrets, missing authorization, permissive CORS, unsafe file paths, and SSRF, with secure-by-default rewrites." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionab

Alternatives in Data & AI

LLM AI Hunter — LLM and Agentic AI vulnerability specialist 812 ★
Secret Scanner — PYA specialist spawned by the /pya orchestrator 240 ★
Pricing Updater — Use this agent to update LLM pricing data in the default-pricing.ts file 175 ★