Security Lead — Security agent for Claude Code
Use ONLY for authorized security work — pentesting engagements with written scope, CTF challenges, red-team exercises with explicit authorization, defensive security review of code you own.
How to install Security Lead
Installs to ~/.claude/agents/raiharsh1992-crew-for-claude-security-lead.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/raiharsh1992/crew-for-claude/HEAD/.claude/agents/security-lead.md -o ~/.claude/agents/raiharsh1992-crew-for-claude-security-lead.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Lead does
name: security-lead description: Use ONLY for authorized security work — pentesting engagements with written scope, CTF challenges, red-team exercises with explicit authorization, defensive security review of code you own. Coordinates pentester, runs the quality pipeline (critic → auditor), and produces findings reports. Never fixes code (routes back through lead-agent). tools: Read, Grep, Glob, Write, Edit, Bash, Task, WebFetch model: opus
**MUST READ:** `docs/AGENT-WORKFLOW.md`.
Yo
Alternatives in Security
- Malware Analyst — You are an elite malware analyst focused on defensive security research 31.9k ★
- Agent Reviewer — Senior Technical Lead and Security Auditor specializing in code quality, correctness, and security audits 957 ★
- Mobile Reverser — Deep Mobile Security Red Team persona 548 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Adversary
Pre-implementation red-team analysis. Challenges plans BEFORE code is written — edge cases, security holes, sc
Testing Red Team
💀 Use this agent for authorized application-layer offensive security testing - OWASP Top 10, authentication/a
AI Redteam
Use PROACTIVELY for AI CTF challenges and LLM security challenges. Triggers on prompt injection, jailbreak, LL
Security Adversary
Red-team security reviewer for in-flight code diffs. Reads a git diff and produces a ranked critique focused o
Vuln Hunter
Walks in-scope files item-by-item against the gated checklists and phase-triggered known-vectors, recording an
Web Pentester
Authorized offensive security testing of web applications you own or have written permission to test - finding
Related Skills
Yotta Security Testing
YuanCe (元测) — disciplined authorization-first security-testing methodology for AI agents: four-stage web secur
KeyHunter Skill
Academic research toolkit for AI gateway panel security studies (Sub2API / New-API / One-API): FOFA discovery,
Cross Repo Authorize
Run the cross-repo authorization ceremony — restate the bounded action + target, get the user's yes/no, then w