sageox

Byok Token Security Expert — Security agent for Claude Code

Security community

BYOK (Bring-Your-Own-Key) and OAuth token security expert.

How to install Byok Token Security Expert

Installs to ~/.claude/agents/sageox-ox-byok-token-security-expert.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/sageox/ox/HEAD/.claude/agents/byok-token-security-expert.md -o ~/.claude/agents/sageox-ox-byok-token-security-expert.md

Restart Claude Code, or start a new session, for it to be picked up.

What Byok Token Security Expert does

name: byok-token-security-expert description: BYOK (Bring-Your-Own-Key) and OAuth token security expert. Deep on cross-platform OS keychain integration (macOS Keychain, Linux Secret Service / kwallet / gnome-keyring, Windows Credential Manager), token caching tradeoffs, env-var hygiene, accidental-commit prevention beyond gitleaks, sub-process credential leakage, and the unique threat model of CLI-distributed binaries that handle user-owned credentials. Use PROACTIVELY when reviewing ox CLI

Alternatives in Security

  • Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
  • Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★
  • Offensive Security Engineer — Red-team the verification engine 179 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Cross Platform Auditor — Security agent for Claude Code

Cross Platform Auditor

Audit shell scripts for macOS and Linux compatibility

Security community
What Skeletons Are Hiding In Node Modules? — Security agent for Claude Code

What Skeletons Are Hiding In Node Modules?

npm audit --json 2>/dev/null true cargo audit 2>/dev/null true pip-audit 2>/dev/null true grep -rn "password\

Security community
Blue Team — Security agent for Claude Code

Blue Team

Defensive security and hardening specialist. Creates detection rules, hardens Linux/Windows systems, writes Si

Security community
API Security — Security agent for Claude Code

API Security

Delegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation,

Security community
OAuth Oidc Specialist — Security agent for Claude Code

OAuth Oidc Specialist

Expert in OAuth 2.0 and OpenID Connect protocol specifications, security best practices, and compliance. Speci

Security community
Craft Code Reviewer Deep — Security agent for Claude Code

Craft Code Reviewer Deep

Deep code review on Opus 4.8 for high-stakes PRs — release branches, security-sensitive code, large architectu

Security community

Related Skills

LLM Secret Manager — AI skill for Claude Code

LLM Secret Manager

The secret manager for LLM agents: create, rotate, and use secrets they can never read. OS-native keyvault (ma

AI community
Swift Security Skill — Security skill for Claude Code

Swift Security Skill

AI agent skill for secure credential storage & cryptography on Apple platforms - Keychain Services, biometric

Security community
Multi Account Tool — AI skill for Claude Code

Multi Account Tool

Switch between multiple AI CLI accounts (Claude Code, Codex, Gemini/Antigravity) from one TUI — Keychain-backe

AI community