kaisa-kucherenko

Gilfoyle — Security agent for Claude Code

Security community

Gilfoyle (Гілфойл, Silicon Valley) — security specialist for deep vulnerability audits — OWASP Top 10, auth/authz, injection, secret exposure, PII leaks, threat modeling.

How to install Gilfoyle

Installs to ~/.claude/agents/kaisa-kucherenko-claude-code-flow-gilfoyle.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/kaisa-kucherenko/claude-code-flow/HEAD/agents/gilfoyle.md -o ~/.claude/agents/kaisa-kucherenko-claude-code-flow-gilfoyle.md

Restart Claude Code, or start a new session, for it to be picked up.

What Gilfoyle does

name: gilfoyle description: Gilfoyle (Гілфойл, Silicon Valley) — security specialist for deep vulnerability audits — OWASP Top 10, auth/authz, injection, secret exposure, PII leaks, threat modeling. Read-only; reports, does not patch. Use for security-critical changes (auth, webhooks, payments, user data, MCP tool surfaces) or a standalone audit. Complement to Agatha/Arthur/Dash — those review broadly, this one thinks like an attacker. Invoke when the user says "Гілфойл", "Gilfoyle", "securi

Alternatives in Security

  • Security Auditor — Security auditor for DevSecOps, OWASP compliance, vulnerability assessment, and threat modeling 2.8k ★
  • Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★
  • Perf Deep Audit — Use this agent when you need a deep performance review of Electron, React, or Vite-related code — especially f 358 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Security Sentinel — Security agent for Claude Code

Security Sentinel

Deep security review focused on OWASP Top 10, injection, auth/authz, data exposure, and dependency vulnerabili

Security community
Ops Security — Security agent for Claude Code

Ops Security

Head of Operations + Security. Owns the security axis of review — threat modeling, auth/authz audits, OWASP To

Security community
Pan Hardener — Security agent for Claude Code

Pan Hardener

Security audit agent — OWASP Top 10 + STRIDE threat modeling across files changed in a phase. Read-only. Spawn

Security community
React Security — Security agent for Claude Code

React Security

Frontend security reviewer persona for React apps. Use to review XSS risks, secret exposure in client bundles,

Security community
Sec — Security agent for Claude Code

Sec

Security review, vulnerability analysis, threat modeling using STRIDE+DREAD. Use PROACTIVELY when reviewing au

Security community
Agentille Security Reviewer — Security agent for Claude Code

Agentille Security Reviewer

Reviews changed code for security issues — secret leaks, injection vectors, auth bypass, unsafe deserializatio

Security community

Related Skills

Security Auditor — Security skill for Claude Code

Security Auditor

Audits code for OWASP-class vulnerabilities — injection, auth flaws, secret leaks, unsafe deserialization.

Security community
API Security — Security skill for Claude Code

API Security

API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-

Security community
J Audit — Security skill for Claude Code

J Audit

Security threat model and vulnerability scan — STRIDE analysis, SAST patterns, and compliance mapping. Use whe

Security community