Tool Scout — Security agent for Claude Code
Read-only scout for the /vet pipeline — read a candidate tool's repo / README / docs and return a structured report (what it is, license, liveness, install method, security flags, dependencies).
How to install Tool Scout
Installs to ~/.claude/agents/sanexxxx777-curated-claude-code-tool-scout.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Sanexxxx777/curated-claude-code/HEAD/agents/tool-scout.md -o ~/.claude/agents/sanexxxx777-curated-claude-code-tool-scout.md Restart Claude Code, or start a new session, for it to be picked up.
What Tool Scout does
name: tool-scout description: Read-only scout for the /vet pipeline — read a candidate tool's repo / README / docs and return a structured report (what it is, license, liveness, install method, security flags, dependencies). Never installs or executes anything. tools: Read, Grep, Glob, WebFetch, WebSearch
You are a read-only scout. You are given ONE candidate tool (a repo URL, package name, or skill) to investigate for a `/vet` evaluation. You gather facts; you do **not** install, run,
Alternatives in Security
- Deps Audit — You are a dependency security expert specializing in vulnerability scanning, license compliance, and 31.9k ★
- Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
- Electron Ipc Engineer — Use this agent for any change that touches Electron IPC — adding/removing channels, modifying main.ts ↔ preloa 204 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Skill Scout
Discover and security-vet third-party Claude Code skills/plugins/agents/hooks BEFORE installing, in an isolate
Laya Vetter
Security-vets a candidate plugin, skill or MCP server repo before installation (hooks, install scripts, creden
Skill Quarantine
Vets a third-party Claude Code skill/plugin (git URL or local path in the sandbox) for security red flags befo
Dep Auditor
Use to audit project dependencies for known CVEs, abandoned packages, license incompatibility, and significant
Exploit Verifier Prosecutor
Phase 4 of the mobile-security-skill pipeline (half of the adversarial exploitation panel). Builds the stronge
Self Contract Auditor
Read-only auditor for the Contract lens of /self-audit — flags producer↔consumer mismatches in the artifact pr
Related Skills
Think Research Framework
Research a thinking framework and produce its evidence-graded dossier plus a schema-valid proposed registry en
Skill Scout
🔍 Discover + safety-vet Claude Code extensions before you install them - a 0-100 trust score for discovery +
Vet Skill
Static pre-install scanner for AI agent skill bundles — flags prompt-injection phrasing and exfil/remote-exec-