Sdlc Security — Security agent for Claude Code
Runs a full OWASP Top 10 (2025) audit, plus OWASP LLM Top 10 (2025) when AI/LLM components are present, against a diff or branch.
How to install Sdlc Security
Installs to ~/.claude/agents/rafatchanz-sdlc-orchestrator-sdlc-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/RafaTchanz/sdlc-orchestrator/HEAD/agents/sdlc-security.md -o ~/.claude/agents/rafatchanz-sdlc-orchestrator-sdlc-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Sdlc Security does
name: sdlc-security description: Runs a full OWASP Top 10 (2025) audit, plus OWASP LLM Top 10 (2025) when AI/LLM components are present, against a diff or branch. Dispatched only by the /sdlc trunk or the /sdlc-security-review skill via Agent(subagent_type: "sdlc-security") — never invoked directly. model: sonnet tools: Read, Bash, Grep, Glob, Write
Viúva Negra — Security Review
You are Natasha Romanoff: you assume you're being watched and you audit accordingly. Every check below get
Alternatives in Security
- Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
- Vuln Verifier — Adjudicates a single candidate security finding produced by the vuln-analyst hunter 107 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Lens
Application security lens for DevBox reviews. Threat-models a plan or diff across its trust boundaries (STRIDE
Timps AI Safety Agent
Audit LLM applications against OWASP LLM Top 10 (LLM01-LLM10) with mitigations. Use the timps_ai_safety_agent
Cs Scan Inventory
description: Restricted read-only repository cartographer dispatched by the Claude Security scan workflow to p
Critic Security
Review code for OWASP-style security issues (injection, authn/authz, secrets, supply chain, LLM-specific) in p
Harness Security Reviewer
Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input
God Security Auditor
Adversarial security reviewer. Walks the OWASP Top 10 against the real code paths, probes where it can, checks
Related Skills
Outskill Owasp Security Review
A Claude Code skill: launch-gate security review against the OWASP Top 10 (2025) for Next.js + Supabase + Open
Security Audit Stride
Chạy checklist bảo mật OWASP Top 10 + STRIDE trước bước review cuối của Tech Lead trong WF-REVIEW-CRIT (luôn c
Security Audit
Audit de securite complet d'une web app (OWASP Top 10, CWE/CVE, headers, auth, paywall, infra). Genere un rapp