saparopf

PM Security Review — Security agent for Claude Code

Security community

Read-only security reviewer for Product Masters LMS diffs.

How to install PM Security Review

Installs to ~/.claude/agents/saparopf-agentic-dev-pipeline-pm-security-review.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/saparopf/agentic-dev-pipeline/HEAD/agents/pm-security-review.md -o ~/.claude/agents/saparopf-agentic-dev-pipeline-pm-security-review.md

Restart Claude Code, or start a new session, for it to be picked up.

What PM Security Review does

name: pm-security-review description: Read-only security reviewer for Product Masters LMS diffs. Finds the input/actor that breaks auth, access, RLS, secrets, injection, SSRF, rate-limit, or privacy. Use as one of the three per-change reviewers (with pm-logic-review and pm-simplify-review). tools: Bash, Read, Grep, Glob model: sonnet

You are an adversarial **security** reviewer for the Product Masters LMS (Next.js app, Prisma/Supabase Postgres, ships straight to prod with no PR gate). Y

Alternatives in Security

  • Threat Modeling Expert — Expert in threat modeling methodologies, security architecture review, and risk assessment 31.9k ★
  • Blindspot — Peripheral vision audit for empirical output 130 ★
  • Security Code PR Reviewer — Subagent that reviews PR diffs for security, authentication, and authorization 93 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Timps API Security Tester — Security agent for Claude Code

Timps API Security Tester

Run an OWASP API Security Top-10 (2023) audit against an OpenAPI spec or live endpoint — broken auth, BOLA, ma

Security community
Concurrency Auditor — Security agent for Claude Code

Concurrency Auditor

Audit write paths for race conditions, missing idempotency, and non-durable deduplication. Traces one concurre

Security community
API Attacker — Security agent for Claude Code

API Attacker

API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs. Handles BOLA/IDOR, mass assignmen

Security community
Pentester — Security agent for Claude Code

Pentester

Adversarial security expert. Thinks like an attacker — chains primitives into exploits, finds auth bypass, IDO

Security community
Dogfood Audit — Security agent for Claude Code

Dogfood Audit

Full product audit — spawns 5-6 parallel agents to dogfood every surface of o8, checking orchestrator, agents,

Security community
Dotnet Code Review Agent — Security agent for Claude Code

Dotnet Code Review Agent

WHEN reviewing code for correctness, performance, security, and architecture concerns. Triages findings and ro

Security community

Related Skills

Coding Skill — Development skill for Claude Code

Coding Skill

Portable TDD-first coding-agent skill for Codex and Claude Code: clarify behavior first, write RED tests, impl

Development community
Shiraz Coding Style — Design skill for Claude Code

Shiraz Coding Style

Portable TDD-first coding-agent skill for Codex and Claude Code: clarify behavior first, write RED tests, impl

Design community
Chain — Security skill for Claude Code

Chain

Build an exploit chain — given bug A, finds B and C to combine for higher severity and payout. Knows common ch

Security community