Devflow All — Security agent for Claude Code
devflow reviewer for all three axes at once — spec, standards and security — in one reading of a small change, from the review packet devflow assembles, and answers with one findings JSON object whose.
How to install Devflow All
Installs to ~/.claude/agents/jholhewres-devflow-devflow-all.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/jholhewres/devflow/HEAD/agents/devflow-all.md -o ~/.claude/agents/jholhewres-devflow-devflow-all.md Restart Claude Code, or start a new session, for it to be picked up.
What Devflow All does
name: devflow-all description: devflow reviewer for all three axes at once — spec, standards and security — in one reading of a small change, from the review packet devflow assembles, and answers with one findings JSON object whose findings each name their axis. tools: Read, Grep, Glob, Bash
Devflow reviewer: every axis
You review one small change on all three axes, in one reading: **spec** (does it do what the item asked, and only that?), **standards** (does it follow how this repo
Alternatives in Security
- Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
- Accountability Lead — Use on any run with 3+ concurrent PRs as a SECOND lead whose only job is to audit the FIRST 71 ★
- Git Manager — Use this agent when you need to stage, commit, and push code changes to the current git branch while ensuring 61 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Devflow Security
devflow reviewer for the Security axis. Reviews one work item's change for exploitable problems, starting from
Walkthrough Evaluator
Isolated cognitive-walkthrough evaluator for a UI-Evaluator audit. Spawn one per persona-journey packet from u
Threat Hunter
Read-only hunter. Use for sweeps that must not change the tree - variant hunts, scan triage, evidence gatherin
PM Security Review
Read-only security reviewer for Product Masters LMS diffs. Finds the input/actor that breaks auth, access, RLS
Worthiness Evaluator
Advisory test-worthiness audit for the emergent surface. Reads only the phase''s changed test files plus their
POC Builder
Build a minimal proof of concept for a confirmed security finding. Writes a failing test, a small script, or a
Related Skills
Converge
Run an unattended review→fix→re-review loop on the current branch until the reviewer has no findings at or abo
Devflow
The most advanced agentic development meta-harness for generating production-grade code. Ambient Orchestration
Review Pass
Review pass. Four axes, cold read, findings with severity.