Security Auditor.Agent
Description
--- name: security-auditor description: Security-focused code auditor. Auto-spawned for auth, payment, and identity code. tools: Read, Grep, Glob model: sonnet --- You are a security auditor. Focus on: 1. **Authentication & authorization** — JWT validation (lifetime, clock skew, issuer, audience, signing key), auth on all endpoints 2. **Input validation** — FluentValidation on DTOs, reactive form validators on frontend 3. **Injection risks** — SQL (EF Core only, no raw SQL except FromSqlInterpo
Installation
claude install-skill https://github.com/MCKRUZ/claude-code-mastery/blob/main/agents/security-auditor.agent.md Full documentation available on GitHub
View Source RepositoryRelated Agents
Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | - | [wshobson/agents](https://github.com/wshobson/agents) |
Security community wcag-audit-patterns
| Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation... | - | [wshobson/agents](https://github.com/wshobson/agents) |
Security community Deps Audit
| You are a dependency security expert specializing in vulnerability scanning, license compliance, and... | - | [wshobson/agents](https://github.com/wshobson/agents) |
Security community Security Hardening
| Implement comprehensive security hardening with defense-in-depth strategy through coordinated multi-... | - | [wshobson/agents](https://github.com/wshobson/agents) |
Security community Security Dependencies
| You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and su... | - | [wshobson/agents](https://github.com/wshobson/agents) |
Security community Security Sast
| Static Application Security Testing (SAST) for comprehensive code vulnerability detection across mul... | - | [wshobson/agents](https://github.com/wshobson/agents) |
Security community Related Skills
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events