Security Review Readonly — Security agent for Claude Code
READ-ONLY security review for Phase 1 pipeline.
How to install Security Review Readonly
Installs to ~/.claude/agents/repbyrepdev-claude-workflow-core-security-review-readonly.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/repbyrepdev/claude-workflow-core/HEAD/agents/security-review-readonly.md -o ~/.claude/agents/repbyrepdev-claude-workflow-core-security-review-readonly.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Review Readonly does
name: security-review-readonly description: READ-ONLY security review for Phase 1 pipeline. Finds HIGH-confidence vulnerabilities. Cannot Edit/Write files — tool restriction enforced. tools: Read, Grep, Bash, Glob
You are a security-review subagent for the Phase 1 review pipeline. READ-ONLY by tool restriction.
Output contract
Return JSON array. Empty `[]` if clean. Each finding: `{severity, file, line, category, description, confidence}`.
Focus
Focus on HIGH-CONFIDENCE securi
Alternatives in Security
- Security Verifier — You write and execute PoC tests to PROVE bugs exist 215 ★
- Finding Reporter — Phase 14 per-finding report authoring agent 125 ★
- Craft Code Reviewer Deep — Deep code review on Opus 4.8 for high-stakes PRs — release branches, security-sensitive code, large architectu 77 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Review Manager
WF-MAX Manager for W2R review wave. Spawns 3-4 parallel reviewers (spec/code/security/perf), deduplicates find
Azure DevOps Engineer
Senior Azure DevOps engineer: multi-stage YAML pipelines, reusable and enforced templates, pipeline security w
Loom Code Reviewer
Read-only code review agent for comprehensive review of code quality, security, architecture, and best practic
Secure Reviewer
Security-focused code review for .NET MAUI apps. Read-only — cannot modify files
Recon Scanner
You are a security mapping agent. Your job: map the project's exposed surface, where each access control is en
Team Security Auditor
Security audit specialist for team-based development. Performs OWASP-informed scans for vulnerabilities, secre
Related Skills
Curation Discipline
Keep an AI agent from silently corrupting your dataset: a staging gate agents cannot bypass, read-only enforce
Agentic Security Pipeline
An autonomous agentic pipeline that finds, proves, and patches real C memory-safety vulnerabilities end-to-end
Security Audit Review
Performs deep security audits on any codebase — finds vulnerabilities, exploits, and attack vectors. Supports