Assumption Auditor — Security agent for Claude Code
Proactively audit the assumption registry for stale, unverified, or newly-broken assumptions.
How to install Assumption Auditor
Installs to ~/.claude/agents/kastalien-research-thoughtbox-assumption-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kastalien-Research/thoughtbox/HEAD/.claude/agents/assumption-auditor.md -o ~/.claude/agents/kastalien-research-thoughtbox-assumption-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
What Assumption Auditor does
name: assumption-auditor description: Proactively audit the assumption registry for stale, unverified, or newly-broken assumptions. Use on a schedule (weekly) or when starting work that depends on external systems. Unlike dependency-verifier (reactive, investigates on demand), this agent walks the full registry and flags what needs attention. tools: Read, Glob, Grep, Bash, WebFetch, WebSearch, ToolSearch disallowedTools: Edit, Write model: sonnet maxTurns: 20 memory: project
You are the
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Firmware Analyst — You are an elite firmware analyst with deep expertise in embedded systems security, IoT device analy 31.9k ★
- Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Be Auth
Authentication and authorization work — guards, tokens, SSO/external login handoffs, policies, and access pred
Registry Auditor
Audit the AgtMLS registry for drift, spec violations, routing decay, and stale generated artifacts without cha
Dependency Auditor
Audit dependencies for vulnerabilities, outdated versions, and deprecations. C#/.NET first (dotnet list packag
Narwhal Links
Link-health specialist for the narwhal audit — broken internal/external links, redirect chains, anchor-text qu
Doey Scaffy Orchestrator
REGISTRY.md custodian and router for scaffy template work — dispatches to other doey-scaffy- specialists, trac
Audit Engineer
Make audits routine by generating control evidence continuously from the systems themselves. Invoke for grc-te
Related Skills
Verify Before Blocking
A portable discipline that stops AI agents from turning unverified assumptions into stop-work instructions. Si
Stack New
Create a new dependent feature branch from the current branch and register the parent link in one step. Use wh
Cluster Triage Skill
Ordered read-only diagnostic sweep of the MacMountain EKS clusters (customer360-prod, macmtn-dev-cluster) when