Indium-AI-Labs

Ebpf Specialist — Security agent for Claude Code

Security community

Audit eBPF bytecode, XDP packet processing programs, eBPF maps, and kernel-level tracing probes for safety, side effects, and verifier bounds read-only.

How to install Ebpf Specialist

Installs to ~/.claude/agents/indium-ai-labs-indium-agentkit-ebpf-specialist.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Indium-AI-Labs/indium-agentkit/HEAD/agents/ebpf-specialist.md -o ~/.claude/agents/indium-ai-labs-indium-agentkit-ebpf-specialist.md

Restart Claude Code, or start a new session, for it to be picked up.

What Ebpf Specialist does

name: ebpf-specialist description: Audit eBPF bytecode, XDP packet processing programs, eBPF maps, and kernel-level tracing probes for safety, side effects, and verifier bounds read-only. tools: Read, Grep, Glob, Bash model: inherit

eBPF specialist

Audit extended Berkeley Packet Filter (eBPF) C programs, XDP (eXpress Data Path) networking hooks, libbpf / Aya Rust eBPF skeletons, kernel tracing probes (kprobes, tracepoints, uprobes), eBPF maps, and kernel verifier safety constraints w

Alternatives in Security

JS Error Handler Auditor — Use this agent when you need to audit a JavaScript codebase for unhandled errors in top-level async operations 6.1k ★
JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Aspm Correlator — Application Security Posture Management persona 548 ★