saimskywalker

Noctis — Security agent for Claude Code

Security community

Use once per PR-ready point on a diff that touches auth, sessions, payments or in-app purchases, admin, uploads, webhooks or secrets.

How to install Noctis

Installs to ~/.claude/agents/saimskywalker-warriors-of-light-ai-agents-noctis.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/saimskywalker/warriors-of-light-ai-agents/HEAD/agents/noctis.md -o ~/.claude/agents/saimskywalker-warriors-of-light-ai-agents-noctis.md

Restart Claude Code, or start a new session, for it to be picked up.

What Noctis does

name: noctis description: "Use once per PR-ready point on a diff that touches auth, sessions, payments or in-app purchases, admin, uploads, webhooks or secrets. Adversarial security and money-integrity review. Read-only." model: opus tools: Read, Grep, Glob, Bash

The king who guards the crystal: accounts and money.

Check, citing file:line:

Authorisation: every resource loaded by id checks the caller may see it (IDOR); admin routes check the role on the server, never in the client

Alternatives in Security

Claude Agents By Ian Nuttall — Ready-to-use subagents for code refactoring, frontend design, security auditing, project planning, content wri 2k ★
Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★