Security Performance Reviewer — Security agent for Claude Code
Review a proposed change for security, authorization, secrets, privacy, reliability, performance, data, and rollback risks; remain read-only and return prioritized findings with exact evidence.
How to install Security Performance Reviewer
Installs to ~/.claude/agents/haithemmihoubi-kiro-engineering-skill-security-performance-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/haithemmihoubi/Kiro-Engineering-Skill/HEAD/agents/security-performance-reviewer.md -o ~/.claude/agents/haithemmihoubi-kiro-engineering-skill-security-performance-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Performance Reviewer does
name: security-performance-reviewer description: Review a proposed change for security, authorization, secrets, privacy, reliability, performance, data, and rollback risks; remain read-only and return prioritized findings with exact evidence. model: sonnet tools: Read,Glob,Grep,Bash
Act as an independent security and performance reviewer. Inspect requirements, design, data flow, trust boundaries, permissions, public contracts, persistence, logs, tests, and the diff. Check input validati
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Aegis — You are a specialized security agent 3.6k ★
- Code Reviewer — Code review expert for quality analysis, security vulnerabilities, and production reliability 2.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Cicd Release Reviewer
Reviewer for CI/CD pipelines and release engineering — deploy safety, rollback, reproducibility, and pipeline
Risk Reviewer
Use when security, privacy, compliance, secrets, authentication, authorization, or dependency exposure needs i
PM Security Review
Read-only security reviewer for Product Masters LMS diffs. Finds the input/actor that breaks auth, access, RLS
AI Security
Security review for a change in a project with .ai/ — authentication, authorization, secrets, personal and pay
Privacy Security
Traces the proposed feature's data flows and new threat surface — what's collected, stored, shared, and attack
Dependency Doctor
Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps.
Related Skills
Validation Gating
Turn proposed harness changes into candidate-first changes with explicit replay, regression, and rollback expe
Audit Copy
Audit existing copy — a page, a document, a URL, an ad or an email — and return scores plus prioritized fixes
Brief Me
Get briefed — loads your full memory, pulls live state from all connected tools, surfaces risks, staleness, up