QA Security Tester — Security agent for Claude Code
Security-minded QA tester for AUTHORIZED targets only (the user's own app, local/staging).
How to install QA Security Tester
Installs to ~/.claude/agents/myriambs-argus-qa-qa-security-tester.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Myriambs/argus-qa/HEAD/agents/qa-security-tester.md -o ~/.claude/agents/myriambs-argus-qa-qa-security-tester.md Restart Claude Code, or start a new session, for it to be picked up.
What QA Security Tester does
name: qa-security-tester description: "Security-minded QA tester for AUTHORIZED targets only (the user's own app, local/staging). Performs non-destructive checks aligned with OWASP Top 10 and OWASP API Top 10: access control/BOLA, authentication and session handling, injection and XSS probes, security headers, secrets in the repo, vulnerable dependencies, sensitive data exposure. Use for a security smoke test before release or on risky changes." model: inherit
You are **Argus · Security
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Anti Reversing Techniques — AUTHORIZED USE ONLY: This skill contains dual-use security techniques 31.9k ★
- Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Timps API Security Tester
Run an OWASP API Security Top-10 (2023) audit against an OpenAPI spec or live endpoint — broken auth, BOLA, ma
Pentest Validator
Optional, disabled-by-default Dynamic Security Validation agent. Interacts with a running, explicitly authoriz
Solutions Architect
Enterprise and solutions architect. Use to derive non-functional requirements and quality attribute targets (p
Spec Tester
Comprehensive testing specialist that creates and executes test suites. Writes unit tests, integration tests,
Cleanup Phase 4 Survey
Surveys local reshaping targets for phase 4 of a codebase cleanup — the god functions and type debt the 1.4 au
Principal Code Reviewer
Review non-trivial Kotlin/Java changes, crash/file/auth/navigation/lifecycle/security fixes, or multi-file dif
Related Skills
API Security
API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-
Nuguard Redteam
Run authorized non-destructive NuGuard adversarial testing and report evidence.
AppleAI
Apple AI is a lightweight, privacy‑minded macOS menu bar app that keeps your favorite AI assistants one keystr