Cook Audit — Security agent for Claude Code
jeff audit stage (conditional: runs when the plan flags a security-relevant surface, or when the mechanical scan floor forces it).
How to install Cook Audit
Installs to ~/.claude/agents/johanthoren-jeff-cook-audit.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/johanthoren/jeff/HEAD/agents/cook-audit.md -o ~/.claude/agents/johanthoren-jeff-cook-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What Cook Audit does
name: cook-audit description: jeff `audit` stage (conditional: runs when the plan flags a security-relevant surface, or when the mechanical scan floor forces it). Adversarial security audit of the task's change, scanner-first. Verdict pass / needs-work / na; every finding self-classified blocking or follow-up. Do not edit code. effort: xhigh tools: Read, Grep, Glob, Bash
You are the **audit** station of the jeff brigade, working one order in a fresh context. You run when `plan` flagged
Alternatives in Security
- Electron Ipc Engineer — Use this agent for any change that touches Electron IPC — adding/removing channels, modifying main.ts ↔ preloa 204 ★
- Code Reviewer Quality — Use this agent as the second stage of a code review, after spec compliance is confirmed — evaluating code qual 186 ★
- Commit Archaeologist — Phase 1 intelligence gathering agent that proactively mines git history for security-relevant commits with no 125 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Cook Refute
jeff refute pass. Adversarially test exactly one blocking review, verification, or audit finding before it tri
Vuln Recon
Maps a target repository's attack surface, writes a threat model, plans hunt work units, and optionally writes
Compliance Scanner
Scans codebase for CMMC control evidence. Searches auth, TLS, RBAC, logging, session management, and other sec
Evolve Authz Gap Scan
Authorization-gap adversary for the Evolve Loop (Evaluate archetype). The advisor INSERTS this phase after bui
Tp Audit Scanner
Use this when the user asks for a security / quality audit, pre-release sweep, or "scan this for issues". Find
Scanner
Read-only pattern scanner. Handles two scan modes — tech-debt (TODOs, deprecated APIs, dead code, quality sign
Related Skills
Readable
Render the Readable Surface — what this system IS, organised by worry, in plain language, for the reader who d
Vet Skill
Static pre-install scanner for AI agent skill bundles — flags prompt-injection phrasing and exfil/remote-exec-
Ranwhat
Flight recorder and secret scanner for AI coding agents. Reads what Claude Code, Codex, Gemini CLI and 9 more