Kennyalfredo

Webvuln Surface — Security agent for Claude Code

Security community

Builds the TESTABLE request surface for the active web-vuln tier from an ingested program.

How to install Webvuln Surface

Installs to ~/.claude/agents/kennyalfredo-pr-agent-webvuln-surface.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/webvuln-surface.md -o ~/.claude/agents/kennyalfredo-pr-agent-webvuln-surface.md

Restart Claude Code, or start a new session, for it to be picked up.

What Webvuln Surface does

name: webvuln-surface description: Builds the TESTABLE request surface for the active web-vuln tier from an ingested program. Merges the passive gau/endpoint corpus with a light authenticated Playwright crawl to inventory live endpoints, parameters, forms, JSON bodies, API routes, and reflected inputs. Output is a prioritized injection-point list (out//webvuln/surface/.json) that the class hunters consume. Gated by the §1 active-compliance gate. Does NOT send payloads, exploit, or

Alternatives in Security

  • Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
  • Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
  • Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★

Full documentation available on GitHub

View Source Repository

Related Agents

Auth Context — Security agent for Claude Code

Auth Context

Stores and validates authenticated test-account context for the active web-vuln tier. Takes operator-pasted se

Security community
Timps API Security Tester — Security agent for Claude Code

Timps API Security Tester

Run an OWASP API Security Top-10 (2023) audit against an OpenAPI spec or live endpoint — broken auth, BOLA, ma

Security community
Audit Reviewer — Security agent for Claude Code

Audit Reviewer

Hypothesis-driven code review with tool-grounded validation. Forms testable hypotheses, validates with Semgrep

Security community
Solana Expert Engineer — Security agent for Claude Code

Solana Expert Engineer

Use this agent when working on Solana blockchain development tasks including smart contract/program developmen

Security community
Reconcile — Security agent for Claude Code

Reconcile

Merges and dedupes the six vuln queues plus SAST findings into one exploitation queue.

Security community
Cofounder Agent — Security agent for Claude Code

Cofounder Agent

Strategy-layer assistant for a program's cofounder. Helps author and audit the six v1 strategy registries (pit

Security community

Related Skills

Hunt Access — Development skill for Claude Code

Hunt Access

Active IDOR / BOLA / BFLA / mass-assignment hunt for an ingested program. Consumes the webvuln-surface seeds +

Development community
Attack Surface — Security skill for Claude Code

Attack Surface

External attack-surface / recon audit of domains YOU OWN (your sites + subdomains, client sites under contract

Security community
Ext Recon — Development skill for Claude Code

Ext Recon

Launch the ext-enumerator agent to run passive+active recon and service/web enumeration against the in-scope t

Development community