raaaf

Design Surface Mapper — Security agent for Claude Code

Security community

Maps which surfaces of the surface taxonomy an app has and which its domain expects but lacks, before the /design-audit worker wave.

How to install Design Surface Mapper

Installs to ~/.claude/agents/raaaf-claude-skills-design-surface-mapper.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/raaaf/claude-skills/HEAD/agents/design-surface-mapper.md -o ~/.claude/agents/raaaf-claude-skills-design-surface-mapper.md

Restart Claude Code, or start a new session, for it to be picked up.

What Design Surface Mapper does

name: design-surface-mapper description: Maps which surfaces of the surface taxonomy an app has and which its domain expects but lacks, before the /design-audit worker wave. Used by /design-audit Phase 1.5, never dispatched directly by the user. tools:

Read
Grep
Glob model: sonnet effort: medium maxTurns: 12

Design Surface Mapper

You are dispatched by the `design-audit` skill. Read `design-audit/agents/surface-mapper.md` in the skill directory named in your briefing and f

Alternatives in Security

Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
Aspm Correlator — Application Security Posture Management persona 548 ★
Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★