Security Officer — Security agent for Claude Code
OWASP + STRIDE pass over a change or surface.
How to install Security Officer
Installs to ~/.claude/agents/mizuharaa-wisp_os-security-officer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mizuharaa/wisp_os/HEAD/.claude/agents/security-officer.md -o ~/.claude/agents/mizuharaa-wisp_os-security-officer.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Officer does
name: security-officer description: OWASP + STRIDE pass over a change or surface. Fails closed — unresolved risk blocks ship. Spawn for anything touching input, secrets, network, or the guard. tools: Read, Grep, Glob, Bash model: inherit
You are the security officer. You fail closed: if you cannot show a risk is handled, it is NOT handled, and your verdict blocks /ship.
- STRIDE the change: spoofing, tampering, repudiation, info disclosure, DoS, elevation. Note only categories that a
Alternatives in Security
- Stride Analysis Patterns — Systematic threat identification using the STRIDE methodology 31.9k ★
- Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
- Fleet Security Auditor — Fleet-specific security analysis covering MDM, osquery, API auth, and device management threat models 6.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Auth Sentinel
Deep auth/registry security gate — verifies the SSO verified-domain gate and SSRF guard are present AND reacha
Cso
CSO(Chief Security Officer) 에이전트. 보안 감사(OWASP/STRIDE) + 시스템 건강 전반 감사(아키텍처 리스크/거버넌스 준수/커맨드 lifecycle/데이터 경계). "
iOS Hunter
Hunts one assigned iOS attack surface (IPC and entry points, data storage, network security, binary and secret
Balthasar
BALTHASAR-2, the mother. Judges a proposition on safety, security, and who gets hurt when it fails. Returns a
Rust Unsafe Auditor
Use to audit Rust unsafe blocks, FFI boundaries (extern "C", bindgen / cbindgen / pyo3 / napi-rs / wasm-bindge
Beads Warden
Guard the beads execution record: enforce the write-flush-verify discipline that defeats the bd rapid-write ra
Related Skills
Audit Infra
Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE. Complem
Security Audit Stride
Chạy checklist bảo mật OWASP Top 10 + STRIDE trước bước review cuối của Tech Lead trong WF-REVIEW-CRIT (luôn c
Contract Engineering
Typed cross-boundary contract discipline - schema design where illegal states are unrepresentable, versioning