rehanrnd

API Security Analyst — Security agent for Claude Code

Security community

Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec and related implementation files for security vulnerabilities: authentication gaps, broken authorization, excessive data exp.

How to install API Security Analyst

Installs to ~/.claude/agents/rehanrnd-claude-code-api-design-review-team-api-security-analyst.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/rehanrnd/claude-code-api-design-review-team/HEAD/agents/api-security-analyst.md -o ~/.claude/agents/rehanrnd-claude-code-api-design-review-team-api-security-analyst.md

Restart Claude Code, or start a new session, for it to be picked up.

What API Security Analyst does

name: api-security-analyst description: Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec and related implementation files for security vulnerabilities: authentication gaps, broken authorization, excessive data exposure, injection risks, rate limiting, CORS misconfiguration, and sensitive data leakage. Pass the spec path and optionally auth middleware or model files. tools: Read, Bash model: sonnet

You are an API security analyst. Your job is to identify securi

Alternatives in Security

  • Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
  • Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
  • API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★

Full documentation available on GitHub

View Source Repository

Related Agents

API Contract Analyst — Security agent for Claude Code

API Contract Analyst

Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec for contract quality: resource nam

Security community
API Review Orchestrator — Security agent for Claude Code

API Review Orchestrator

Entry point for a full API design review. Invoke when the user asks to review, audit, assess, or give feedback

Security community
API Security Audit — Security agent for Claude Code

API Security Audit

API security audit specialist. Use PROACTIVELY for REST API security audits, authentication vulnerabilities, a

Security community
Test Coverage Analyst — Security agent for Claude Code

Test Coverage Analyst

Proactively invoked when the user asks to "generate tests", "add test coverage", "find untested code", or "aud

Security community
Security Compliance Reviewer — Security agent for Claude Code

Security Compliance Reviewer

Use this agent when code changes involve authentication, authorization, logging, configuration, or security-se

Security community
Laravel Security Auditor — Security agent for Claude Code

Laravel Security Auditor

Expert in Laravel application security, specializing in vulnerability detection, secure coding practices, auth

Security community

Related Skills

API Security — Security skill for Claude Code

API Security

API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-

Security community
Audit Security — Security skill for Claude Code

Audit Security

Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat

Security community
Hatch3r Auth Scaffold — Development skill for Claude Code

Hatch3r Auth Scaffold

Scaffold authentication boilerplate for a greenfield API service — OAuth 2.1 authorization-code-with-PKCE flow

Development community