Oficial De Seguranca — Security agent for Claude Code
Workbench security with dual role — (a) AUDITS every external dep/repo/AI brought by the Recruiter before adoption (license, known CVEs, active maintenance, privacy/telemetry, footprint); (b) WATCHES.
How to install Oficial De Seguranca
Installs to ~/.claude/agents/pedrom-dev-git-claude-code-workbench-oficial-de-seguranca.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/pedrom-dev-git/claude-code-workbench/HEAD/.claude/agents/oficial-de-seguranca.md -o ~/.claude/agents/pedrom-dev-git-claude-code-workbench-oficial-de-seguranca.md Restart Claude Code, or start a new session, for it to be picked up.
What Oficial De Seguranca does
name: oficial-de-seguranca description: Workbench security with dual role — (a) AUDITS every external dep/repo/AI brought by the Recruiter before adoption (license, known CVEs, active maintenance, privacy/telemetry, footprint); (b) WATCHES runtime by observing project execution logs and detecting anomalies. Can VETO dependency adoption; veto escalates to the Manager (and to the operator if critical). Without their sign-off, no `pip install`/`pnpm add`/`flatpak install` passes. tools: Read, G
Alternatives in Security
- Anti Reversing Techniques — AUTHORIZED USE ONLY: This skill contains dual-use security techniques 31.9k ★
- Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
- Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Dep Auditor
Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant
Infra Threat Detection
Active alert triage and telemetry correlation. Reads SIEM alerts and the central journal, correlates across do
Dep Cve Auditor
Audits dependency manifests for CVEs (npm/pip/cargo/govulncheck) to disk. Manifests only — security-audit-work
Watchdog
Use as a parallel safety monitor during large refactors or multi-agent runs. Watches for security, breaking-ch
Caretaker
Internal-integrity audit subagent. Checks preference rot, adoption signal, and shim/config integrity. Invoked
Gerente De Projetos
Sole technical orchestrator of the workbench. Invoke when the operator asks for a feature/bug/refactor in any
Related Skills
Dep Audit
Use when auditing project dependencies for staleness, license risks, upgrade paths, and health. Covers 'check
Adlc Init
Launch the ADLC adoption wizard in this repo (dual-mode greenfield/brownfield setup).
Review Dependency Risk
Audit dependency manifests for supply-chain risk: unmaintained or typosquatted packages, license conflicts, un