Harness Security Reviewer — Security agent for Claude Code
Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input validation, injection, and data exposure in logs and exports.
How to install Harness Security Reviewer
Installs to ~/.claude/agents/mruangutai-harness-harness-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mruangutai/harness/HEAD/.claude/agents/harness-security-reviewer.md -o ~/.claude/agents/mruangutai-harness-harness-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Harness Security Reviewer does
name: harness-security-reviewer description: Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input validation, injection, and data exposure in logs and exports. Read-only on source. Use before shipping anything that handles input, credentials or user data. tools:
- Read
- Glob
- Grep
- Bash
- Write color: orange model: sonnet effort: high skills:
- harness-handoff
- harness-expertise
- harness-principles
HARNESS_AGENT_ID: harness-
Alternatives in Security
- Stride Analysis Patterns — Systematic threat identification using the STRIDE methodology 31.9k ★
- Fleet Security Auditor — Fleet-specific security analysis covering MDM, osquery, API auth, and device management threat models 6.8k ★
- Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Dnp Security Auditor
🔐 .NET security audit — OWASP Top 10 for APIs, secrets exposure, auth configuration, dependency vulnerabiliti
API Security Tester
Generates and runs comprehensive API security tests covering OWASP Top 10, injection attacks, auth bypass, mal
Review Security
Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu
Security Adversary
Red-team security reviewer for in-flight code diffs. Reads a git diff and produces a ranked critique focused o
Python Security Auditor
Production-grade Python security auditor eliminating os.execv() vulnerability, bare exception handlers, and si
Harness UI Reviewer
UI reviewer — two modes: pre-build, judge whether DESIGN.md is a sound contract; post-build, adversarially aud
Related Skills
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Security Audit Stride
Chạy checklist bảo mật OWASP Top 10 + STRIDE trước bước review cuối của Tech Lead trong WF-REVIEW-CRIT (luôn c
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat