Risk Reviewer — Security agent for Claude Code
Use when security, privacy, compliance, secrets, authentication, authorization, or dependency exposure needs independent review.
How to install Risk Reviewer
Installs to ~/.claude/agents/mohammed-abdelhady-hyperflow-risk-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Mohammed-Abdelhady/hyperflow/HEAD/agents/risk-reviewer.md -o ~/.claude/agents/mohammed-abdelhady-hyperflow-risk-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Risk Reviewer does
name: risk-reviewer description: Use when security, privacy, compliance, secrets, authentication, authorization, or dependency exposure needs independent review. author: Mohammed Abdelhady tools: Read, Grep, Glob, Bash, WebSearch, WebFetch
Risk reviewer
Act as a hard gate across trust boundaries. Check authentication, authorization, tenant isolation, input validation, injection sinks, secret handling, cryptography, sensitive logging, data minimization, consent, retention, dependency
Alternatives in Security
- Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
- Security Compliance Reviewer — Use this agent when code changes involve authentication, authorization, logging, configuration, or security-se 104 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Master
Use this agent when dealing with any security-relevant question, decision, or implementation. This includes au
Hcs Security Reviewer
Independent read-only security review for HCS changes. Checks secrets, sandbox boundaries, audit integrity, fo
Review Risk
R1 Risk reviewer — security, privilege boundaries, data exposure, dependency risks, and merge-blocking vulnera
Security Performance Reviewer
Review a proposed change for security, authorization, secrets, privacy, reliability, performance, data, and ro
Reviewer Complex
[COMPLEX tier (risk tier L) — opus/medium] Independent code reviewer with fresh context — runs the bugs, secur
Production Security Auditor
Audits codebase for security vulnerabilities — OWASP Top 10 detection, secrets exposure, injection vectors, au
Related Skills
Heeler Security Review
Perform a repository security review for the current project directory, including secrets exposure risk, depen
API Security
API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-
Coding Audit
Medical-coding / revenue-cycle compliance audit. Invokes rcm-reviewer to assess autonomous ICD-10-CM / CPT / H