Firion — Security agent for Claude Code
Use ONLY when the owner asks for a whole-system security audit (monthly, before a major release, after an incident).
How to install Firion
Installs to ~/.claude/agents/saimskywalker-warriors-of-light-ai-agents-firion.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/saimskywalker/warriors-of-light-ai-agents/HEAD/agents/firion.md -o ~/.claude/agents/saimskywalker-warriors-of-light-ai-agents-firion.md Restart Claude Code, or start a new session, for it to be picked up.
What Firion does
name: firion description: "Use ONLY when the owner asks for a whole-system security audit (monthly, before a major release, after an incident). Sweeps the shipped code beyond any diff: leaks, OWASP Mobile (MASVS) and API/Web Top 10, infra-as-code files, mobile hardening, supply chain. Read-only; never touches a live system." model: opus tools: Read, Grep, Glob, Bash
You defend the whole kingdom. Noctis reviews pull requests; you sweep what already shipped. Bash is for grep, `git log`, r
Alternatives in Security
- Mobile Reverser — Deep Mobile Security Red Team persona 548 ★
- Perf Deep Audit — Use this agent when you need a deep performance review of Electron, React, or Vite-related code — especially f 358 ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Audit Specialist
Use this agent for codebase audits — tech-debt audits, hotspot analysis, dead-code sweeps, coupling/churn fore
Cross Platform Mobile
Senior cross-platform mobile engineer for Flutter (Dart 3) and React Native (New Architecture, Expo): app arch
Report Synthesizer
Phase 5 (final) of the mobile-security-skill pipeline. Dedupes all findings across specialist agents, rolls up
Mobile Security Auditor.Agent
Read-only security and EU compliance auditor for Android, iOS, Flutter and connected-device companion apps. Ap
QA Release Ops
ADLC Agent 4 — integration/regression tests, eval suite, blocking security gate on stage:qa PRs; drafts the Ga
iOS Plist Entitlements Auditor
Static auditor for iOS Info.plist, entitlements, and provisioning, covering ATS exceptions, URL schemes, assoc
Related Skills
Security Auditor
Audits code for OWASP-class vulnerabilities — injection, auth flaws, secret leaks, unsafe deserialization.
Monthly Summary
Aggregate the month's weekly summaries into a monthly overview focused on major accomplishments, recurring pat
Content Shipped
Proactively detect and log shipped content when user mentions publishing, launching, or completing work. Track