Security Privacy Guardian — Security agent for Claude Code
Use when validating PII handling (LGPD/GDPR), secret leakage in code/prompts/traces, eval-case sanitization, or before assisted_to_autonomous promotion (mandatory third signature).
How to install Security Privacy Guardian
Installs to ~/.claude/agents/rafaelnovaes22-agent-governance-framework-security-privacy-guardian.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/rafaelnovaes22/agent-governance-framework/HEAD/.claude/agents/security-privacy-guardian.md -o ~/.claude/agents/rafaelnovaes22-agent-governance-framework-security-privacy-guardian.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Privacy Guardian does
name: security-privacy-guardian description: Use when validating PII handling (LGPD/GDPR), secret leakage in code/prompts/traces, eval-case sanitization, or before assisted_to_autonomous promotion (mandatory third signature). Refuses any production trace with email/CPF/CNPJ unredacted, eval-case with raw PII, or prompt referencing literal secrets. model: claude-sonnet-4-6 tools: [Read, Glob, Grep, Bash] foundry_agent_version: 0.1.0 linked_principles: [C6, C8] authority_level: sonnet boundari
Alternatives in Security
- Claude Code System Prompts — by Piebald AI - All parts of Claude Code's system prompt, including builtin tool descriptions, sub agent promp 6.3k ★
- Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
- Impeccable Agent — Autonomous executor for non-interactive impeccable commands 530 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Smith Archivist
Emits SmithDecisionRecords and assembles cross-system audit traces. Invoke after every architect promotion, in
Review Risk.Agent
Read-only security and risk reviewer. Surfaces elevated privilege, PII exposure, injection vectors, and auth b
Compliance Auditor
Compliance audit — LGPD, GDPR, HIPAA, SOX, PCI-DSS, ISO regulations.
Portfolio Audit
Audits a project against the global portfolio standards (author signature, gitignore, no secrets, no dead code
Security Engineer Smythe
Use for security audits, auth/crypto/input validation reviews, dependency scanning, secret detection, or valid
Wp Audit Practices
WordPress coding standards auditor — escaping, sanitization, enqueueing, theme supports, hooks, i18n, code qua
Related Skills
My Security Auditor
Comprehensive Claude skill for authorized security auditing — OWASP, MITRE ATT&CK, ISO 27001, SOC 2, PCI-DSS,
Privacy Review
DPIA-lite walkthrough for a product or feature. Surfaces lawful basis, data flows, on-chain considerations, cr
AegisGate
Open-source security gateway for LLM APIs — prompt injection detection, PII redaction, dangerous response sani