Evolve Authz Gap Scan — Security agent for Claude Code
Authorization-gap adversary for the Evolve Loop (Evaluate archetype).
How to install Evolve Authz Gap Scan
Installs to ~/.claude/agents/mickeyyaya-evolve-loop-evolve-authz-gap-scan.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mickeyyaya/evolve-loop/HEAD/agents/evolve-authz-gap-scan.md -o ~/.claude/agents/mickeyyaya-evolve-loop-evolve-authz-gap-scan.md Restart Claude Code, or start a new session, for it to be picked up.
What Evolve Authz Gap Scan does
name: evolve-authz-gap-scan description: Authorization-gap adversary for the Evolve Loop (Evaluate archetype). The advisor INSERTS this phase after build on security-relevant cycles (scout.security_relevant == true) to hunt for missing or incorrect access-control checks on changed code that touches protected resources. model: tier-1 capabilities: [file-read, search] tools: ["Read", "Grep", "Glob", "Bash"] tools-gemini: ["ReadFile", "SearchCode", "SearchFiles", "Shell"] tools-generic: ["read_
Alternatives in Security
- Beads Warden — Guard the beads execution record: enforce the write-flush-verify discipline that defeats the bd rapid-write ra 2.7k ★
- Workflow Nyquist Auditor — Test coverage audit with gap detection and test stub generation 530 ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Evolve Cache Strategy Scan
Cache-coherence audit agent for the Evolve Loop (Evaluate archetype). The advisor INSERTS this phase after Bui
Evolve Accessibility Audit
Accessibility audit agent for the Evolve Loop (Evaluate archetype). The advisor INSERTS this phase after build
Security Advocate
Council archetype — the assume-breach advisor. Dispatched only by the rc-council skill, which holds each arche
Evolve Anything Advisor
Use this agent when the user wants to improve, diagnose, or optimize their Claude Code environment on this PC
Adversary
Pre-implementation red-team analysis. Challenges plans BEFORE code is written — edge cases, security holes, sc
Security Brief
The security conscience of the v2 review gate. It is BOTH a standing brief the Adversary and QA seats always a
Related Skills
Authz Access Control
Authorization design - object-level checks, IDOR/BOLA, RBAC/ABAC, tenant isolation, agent permissions.
Axguard Auth
AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]
Authz
Hunt broken access control — IDOR, missing role checks, mass assignment, and tenant isolation gaps. OWASP A01,
