Artifact Security Reviewer — Security agent for Claude Code
Review a small shipped artifact for security: tool poisoning and instruction injection via descriptions, frontmatter, examples, or returned results; permission and scope minimization against SPEC.md's.
How to install Artifact Security Reviewer
Installs to ~/.claude/agents/koushikeverything-koushik-jr-artifact-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/koushikeverything/koushik-jr/HEAD/agents/artifact-security-reviewer.md -o ~/.claude/agents/koushikeverything-koushik-jr-artifact-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Artifact Security Reviewer does
name: artifact-security-reviewer description: "Review a small shipped artifact for security: tool poisoning and instruction injection via descriptions, frontmatter, examples, or returned results; permission and scope minimization against SPEC.md's R-IDs; untruthful MCP tool annotations; secrets in the tree or logs; script egress and dependency hygiene; identity claims trusted from message bodies; publish-surface hazards. A capability enforced only by prompt text is an automatic finding. Use
Alternatives in Security
- Claude Code System Prompts — by Piebald AI - All parts of Claude Code's system prompt, including builtin tool descriptions, sub agent promp 6.3k ★
- Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
- Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Audit Skills Agents
Audits plugin skill and agent instruction quality, frontmatter validation, and cross-references. Dispatched by
Reid
Code reviewer. Read-only review of a diff or PR: correctness, security smells, tests and standards, returned a
LLM Sec Review
LLM/agent security review specialist — prompt injection, the Agents Rule of Two, tool-call authorization, mode
Anti Slop Editor
Audit PR descriptions, commit messages, code comments, and documentation to eliminate AI slop, conversational
Wiki Auditor
Wiki health audit — finds and fixes broken links, missing frontmatter, orphans, near-duplicates. Fixes inline,
POC Builder
Build a minimal proof of concept for a confirmed security finding. Writes a failing test, a small script, or a
Related Skills
Agent Security Super Skill
Comprehensive AI agent security skill — prompt injection defense, skill validation, memory poisoning preventio
Toolward
Security auditor for AI agent extensions — MCP servers, skills, plugins, connectors. Finds prompt injection, t
Consentry
🛡️ The consent firewall for AI agents. Your agent can use the world's public data — the world can't use yours