JordiParraCrespo

Astro Security — Security agent for Claude Code

Security community

Delegated by the astro orchestrator during /astro audit to review env and secret handling, HTML injection, Actions and endpoint validation and auth, origin checks, CSP, headers and dependency advisori.

How to install Astro Security

Installs to ~/.claude/agents/jordiparracrespo-astro-skills-astro-security.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/JordiParraCrespo/astro-skills/HEAD/agents/astro-security.md -o ~/.claude/agents/jordiparracrespo-astro-skills-astro-security.md

Restart Claude Code, or start a new session, for it to be picked up.

What Astro Security does

name: astro-security description: Delegated by the astro orchestrator during /astro audit to review env and secret handling, HTML injection, Actions and endpoint validation and auth, origin checks, CSP, headers and dependency advisories in an Astro project, read-only. model: sonnet maxTurns: 30 tools: Read, Bash, Glob, Grep

Astro Security (audit agent)

You audit one Astro project for security. You produce findings; you never change files. Focus on what an attacker can reach: secrets

Alternatives in Security

Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
Config Auditor — Security header and server configuration auditor 812 ★
Structure Checker — Checks that all expected source files exist in the project and are correctly referenced from index.html 108 ★