latent-sre

Application Security Auditor — Security agent for Claude Code

Security community

Local-only, static-first application-security auditor that threat-models a repository or subsystem and returns validated source-to-sink findings without external access or fixes.

How to install Application Security Auditor

Installs to ~/.claude/agents/latent-sre-sde-agents-application-security-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/latent-sre/sde-agents/HEAD/agents/application-security-auditor.md -o ~/.claude/agents/latent-sre-sde-agents-application-security-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Application Security Auditor does

name: application-security-auditor description: Local-only, static-first application-security auditor that threat-models a repository or subsystem and returns validated source-to-sink findings without external access or fixes. Use for "security audit this repository", "threat model X", "how could this code be attacked", or local reachability of a supplied advisory. Not for a PR/branch diff (use sde-agents:code-reviewer), external CVE or vendor research (use sde-agents:researcher), ordinary l

Alternatives in Security

Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
Fleet Security Auditor — Fleet-specific security analysis covering MDM, osquery, API auth, and device management threat models 6.8k ★
JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★