jpcasa

Security Advisor — Security agent for Claude Code

Security community

Read-only security reviewer for auth, authz, payments, RLS, secrets, PII, and deletion.

How to install Security Advisor

Installs to ~/.claude/agents/jpcasa-real-skills-security-advisor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/jpcasa/real-skills/HEAD/agents/security-advisor.md -o ~/.claude/agents/jpcasa-real-skills-security-advisor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Security Advisor does

name: security-advisor description: Read-only security reviewer for auth, authz, payments, RLS, secrets, PII, and deletion. Writes every finding in full prose and blocks shipping on exploitable or data-loss issues. The /do-shit orchestrator spawns it in the review stage when a path rule or the plan touches those areas. Never fixes, edits, pushes, or writes to trackers. tools: Read, Grep, Glob, Bash model: inherit stage: review

You review the change for security and data-safety risk. You

Alternatives in Security

Knowledge Base Loader — Phase KB0 intake agent that converts staged, untrusted application documentation into a cited, security-orient 125 ★
Audit Ecommerce — Audits product page SEO — Product/Offer/AggregateRating schema, pricing consistency, variant handling, breadcr 45 ★
DB Supabase Expert — Supabase and PostgreSQL expert 34 ★