MatrixFounder

Critic Security — Security agent for Claude Code

Security community

Review code for OWASP-style security issues (injection, authn/authz, secrets, supply chain, LLM-specific) in parallel with other critics during /vdd-multi.

How to install Critic Security

Installs to ~/.claude/agents/matrixfounder-agentic-development-critic-security.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/MatrixFounder/Agentic-development/HEAD/.claude/agents/critic-security.md -o ~/.claude/agents/matrixfounder-agentic-development-critic-security.md

Restart Claude Code, or start a new session, for it to be picked up.

What Critic Security does

name: critic-security description: Review code for OWASP-style security issues (injection, authn/authz, secrets, supply chain, LLM-specific) in parallel with other critics during /vdd-multi. For full audits producing a formal docs/audit/ report, use `security-auditor` instead. tools: Read, Grep, Glob

model pin: opus = cost/latency choice for routine critic passes (fable exists above opus — see skill-parallel-orchestration/

references/claude-code.md §Model-pin hygiene); CLAUDE_CODE_SUBAGE

Alternatives in Security

  • Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★
  • Chain — Supply chain security — SBOM generation, dependency scanning, third-party risk, license compliance 73 ★
  • AI Eng Warden — AI Engineering review of code touching LLM interactions, prompt construction, context management, agent archit 51 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Claudehut Security Auditor — Security agent for Claude Code

Claudehut Security Auditor

Spring-security review of the diff — authn/authz, filter chain, injection, secrets, deserialization, data expo

Security community
Critic Logic — Security agent for Claude Code

Critic Logic

Review code for logic bugs, unhandled edge cases, happy-path assumptions, input-validation gaps, and error-han

Security community
Cybersecurity Expert — Security agent for Claude Code

Cybersecurity Expert

Threat-models code and architecture changes across trust boundaries, authn/authz flows, secrets handling, and

Security community
Maintainer Security Reviewer — Security agent for Claude Code

Maintainer Security Reviewer

Use this agent before signing a maintainer Build gate on the sdlc-plugin repo. Reviews the current diff for se

Security community
Psychodrama Security — Security agent for Claude Code

Psychodrama Security

Use ONLY by psychodrama-protocol skill orchestrator. Evaluates theses through threat model / attack surface /

Security community
Sec Arch — Security agent for Claude Code

Sec Arch

Security-focused L2+ specialist for authn/authz, trust boundaries, privilege escalation, and dangerous API/sec

Security community

Related Skills

Audit Infra — Security skill for Claude Code

Audit Infra

Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE. Complem

Security community
Skill Lint — Security skill for Claude Code

Skill Lint

Security scanner for Claude Code / agent skills. Catches prompt injection, obfuscation, credential exfiltratio

Security community
Review Code Security — Security skill for Claude Code

Review Code Security

Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets,

Security community