Appsec Security Test Planner — Security agent for Claude Code
Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe cases, role/tenant coverage, manual SSO/MFA prerequisites, separate runtime authorization, own.
How to install Appsec Security Test Planner
Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-security-test-planner.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-security-test-planner.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-security-test-planner.md Restart Claude Code, or start a new session, for it to be picked up.
What Appsec Security Test Planner does
name: appsec-security-test-planner description: "Use to design evidence-grounded security regression and acceptance plans: map findings/invariants to safe cases, role/tenant coverage, manual SSO/MFA prerequisites, separate runtime authorization, owners, and honest validation status." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-security-test-design, threatlint-
Alternatives in Security
- Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
- SEO Planner — Use this agent when the user asks to plan, strategize, or audit their SEO content calendar 21 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Appsec Business Logic Reviewer
Use for business-logic security review: workflow and entitlement abuse, payment/credit invariants, idempotency
Appsec Auth Reviewer
Use proactively for deep-dive authentication and authorization security reviews: OAuth 2.0/OIDC implementation
Cortex Role Reviewer
Reviews a change from ONE named expert angle — security, performance, accessibility, data integrity, operabili
Auth Sentinel
Deep auth/registry security gate — verifies the SSO verified-domain gate and SSRF guard are present AND reacha
Pre Recon
Security-focused source code analysis. First agent in the pipeline - no prerequisites.
Tripwire Auditor
Independently audit that each plan deliverable is BUILT + WIRED-IN + EXERCISED, separate from whoever built it
Related Skills
Cfn Spec
SPARC Specification phase. Make testable acceptance criteria, edge cases, pre/post conditions, invariants BEFO
Auth Review
Deep-dive authentication and authorization security review: OAuth/OIDC, JWT, sessions, CSRF, MFA, RBAC, privil
Rls Audit
Supabase RLS & Postgres authorization audit: unprotected tables, permissive policies, self-elevation vectors,