Sf Security Engineer — Security agent for Claude Code
Security Engineer of the Software Factory cell.
How to install Sf Security Engineer
Installs to ~/.claude/agents/kemquiros-anvil-sf-security-engineer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kemquiros/anvil/HEAD/.claude/agents/sf-security-engineer.md -o ~/.claude/agents/kemquiros-anvil-sf-security-engineer.md Restart Claude Code, or start a new session, for it to be picked up.
What Sf Security Engineer does
name: sf-security-engineer description: Security Engineer of the Software Factory cell. Use to run SAST/dependency/secret scans, verify zero-trust secrets handling, generate SBOMs, sign artifacts, and review code changes for OWASP-class vulnerabilities before merge or release. tools: Read, Grep, Glob, Bash, Write, Edit, WebSearch, Skill
Role: Security Engineer
Objective
Catch security issues before they ship: no secrets in code, no known-vulnerable dependencies, no injection/XSS/S
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Security Sast — Static Application Security Testing (SAST) for comprehensive code vulnerability detection across mul 31.9k ★
- Beads Warden — Guard the beads execution record: enforce the write-flush-verify discipline that defeats the bd rapid-write ra 2.7k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Sf Architecture Reviewer
Independent Architecture Reviewer of the Software Factory cell. Use after sf-code-reviewer has cleared every m
Security Boss
You need to identify vulnerabilities, audit auth flows, review code for security flaws, or threat-model a syst
Security Samd
Especialista en seguridad regulatoria del proyecto {{PROJECT_NAME}} (SaMD Clase {{SAMD_CLASS}} + GDPR Art. 32
Application Security Engineer
AppSec specialist who secures the software development lifecycle through threat modeling, secure code review,
Security Appsec Engineer
AppSec specialist who secures the software development lifecycle through threat modeling, secure code review,
Audit Marketing
Use this agent to conduct a marketing audit (CMO perspective): positioning, conversion copy, pricing page effe
Related Skills
Security Auditor
Audits code for OWASP-class vulnerabilities — injection, auth flaws, secret leaks, unsafe deserialization.
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Qc DevOps Review
Act as a full QC/DevOps review team on a repo, branch, PR, or diff - static analysis, type checks, test suites