mhenke

Sstack Security Attacker — Security agent for Claude Code

Security community

Security lens attacker.

How to install Sstack Security Attacker

Installs to ~/.claude/agents/mhenke-sstack-sstack-security-attacker.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mhenke/sstack/HEAD/agents/sstack-security-attacker.md -o ~/.claude/agents/mhenke-sstack-sstack-security-attacker.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sstack Security Attacker does

name: sstack-security-attacker description: "Security lens attacker. Attacks every mapped surface for SQL injection, OS command injection, path traversal, JWT token tampering, and insecure deserialization. Invoked as a subagent after the orchestrator writes the surface map. Rubric and Report format arrive inline in the dispatch."

Security attacker

You are a **subagent**. The parent agent already ran Discover. Your prompt is the **user message** with labeled sections (typically `### W

Alternatives in Security

  • Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
  • GraphQL Audit — GraphQL API security specialist 812 ★
  • Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Lens Security — Security agent for Claude Code

Lens Security

Security lens of the production readiness audit. Attacks the codebase on paper - injection, SSRF, path travers

Security community
Review Security — Security agent for Claude Code

Review Security

Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu

Security community
API Attacker — Security agent for Claude Code

API Attacker

API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs. Handles BOLA/IDOR, mass assignmen

Security community
Crypto Attacker — Security agent for Claude Code

Crypto Attacker

Cryptography and TLS security specialist. Handles TLS configuration auditing, JWT algorithm confusion, padding

Security community
iOS Platform Attack Auditor — Security agent for Claude Code

iOS Platform Attack Auditor

Audits iOS-specific platform attack surface, covering URL scheme hijack, XPC/Handoff/Spotlight data leakage, r

Security community
Pentester — Security agent for Claude Code

Pentester

Adversarial security expert. Thinks like an attacker — chains primitives into exploits, finds auth bypass, IDO

Security community

Related Skills

0x002132 Skills Bugbounty Hunt API Misconfig — Security skill for Claude Code

0x002132 Skills Bugbounty Hunt API Misconfig

Hunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, CORS, HTTP verb tamper

Security community
Audit Security — Security skill for Claude Code

Audit Security

Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat

Security community
Input Validation Injection — Development skill for Claude Code

Input Validation Injection

Stop SQLi, XSS, command/template injection, SSRF, path traversal, XXE, deserialization.

Development community