Omg Security Reviewer — Security agent for Claude Code
OWASP/secrets/unsafe-pattern security review for oh-my-grok.
How to install Omg Security Reviewer
Installs to ~/.claude/agents/iml1s-oh-my-grok-omg-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/ImL1s/oh-my-grok/HEAD/agents/omg-security-reviewer.md -o ~/.claude/agents/iml1s-oh-my-grok-omg-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Omg Security Reviewer does
name: omg-security-reviewer description: OWASP/secrets/unsafe-pattern security review for oh-my-grok. Read-only; reports findings only — does not implement fixes or mark verified. promptMode: extend permissionMode: plan capabilityMode: read-only agentsMd: true disallowedTools:
- spawn_subagent
- search_replace
- run_terminal_command
- run_terminal_cmd tools:
- find_by_name
- grep_search
- view_file
- list_dir
- read_url_content
- search_web
omg-security-reviewer —
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Dotnet Security Reviewer — WHEN reviewing .NET code for security vulnerabilities, OWASP compliance, secrets exposure, or cryptographic mi 76 ★
- Sdlc Security Reviewer — Security review for production readiness 58 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Static Analysis
Use after code-generator completes to run static analysis tools and report findings. Runs in parallel with sec
Security Performance Reviewer
Review a proposed change for security, authorization, secrets, privacy, reliability, performance, data, and ro
Docs Fixer
Applies validated fixes from docs-checker audit reports. Re-validates factual accuracy findings before applyin
Docs Tutorial Fixer
Applies validated fixes from docs-tutorial-checker audit reports. Re-validates pedagogical findings before app
Harness Security Reviewer
Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input
Review Manager
WF-MAX Manager for W2R review wave. Spawns 3-4 parallel reviewers (spec/code/security/perf), deduplicates find
Related Skills
Craftsman Marketplace
Engineering-readiness audits for AI-built apps. A Claude Code and Codex plugin that finds production risks acr
Feedback To Closure
Turn raw feedback (reports, Sentry, reviews, QA/audit findings) into deduplicated durable tickets and drive ea
Fix PR Feedback
Fetch PR reviewer comments, implement fixes locally, gate the push behind explicit user approval, then watch C