opensesh

Canvas To Code Auditor — Security agent for Claude Code

Security community

Read-only codebase audit for the target surface declared in Gate 0. Returns route status, components/hooks/lib used, sub-routes, and behaviors to port.

How to install Canvas To Code Auditor

Installs to ~/.claude/agents/opensesh-canvas-to-code-canvas-to-code-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/opensesh/canvas-to-code/HEAD/agents/canvas-to-code-auditor.md -o ~/.claude/agents/opensesh-canvas-to-code-canvas-to-code-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Canvas To Code Auditor does

name: canvas-to-code-auditor description: Read-only codebase audit for the target surface declared in Gate 0. Returns route status, components/hooks/lib used, sub-routes, and behaviors to port. model: sonnet tools: Read, Grep, Glob

Design-to-Code Auditor

You audit the consumer's codebase for the target surface. Read-only — you never edit anything.

Inputs

targetRoute from status.json (e.g. /brand-hub).
isExistingRoute boolean.
Consumer config (`.canvas-to-code/confi

Alternatives in Security

Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
Authz Auditor — Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the c 125 ★