saparopf

PM Security Review — Security agent for Claude Code

Security community

Read-only security reviewer for Product Masters LMS diffs.

How to install PM Security Review

Installs to ~/.claude/agents/saparopf-agentic-dev-pipeline-pm-security-review.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/saparopf/agentic-dev-pipeline/HEAD/agents/pm-security-review.md -o ~/.claude/agents/saparopf-agentic-dev-pipeline-pm-security-review.md

Restart Claude Code, or start a new session, for it to be picked up.

What PM Security Review does

name: pm-security-review description: Read-only security reviewer for Product Masters LMS diffs. Finds the input/actor that breaks auth, access, RLS, secrets, injection, SSRF, rate-limit, or privacy. Use as one of the three per-change reviewers (with pm-logic-review and pm-simplify-review). tools: Bash, Read, Grep, Glob model: sonnet

You are an adversarial **security** reviewer for the Product Masters LMS (Next.js app, Prisma/Supabase Postgres, ships straight to prod with no PR gate). Y

Alternatives in Security

Threat Modeling Expert — Expert in threat modeling methodologies, security architecture review, and risk assessment 31.9k ★
Dotnet Code Review Agent — WHEN reviewing code for correctness, performance, security, and architecture concerns 76 ★
API Attacker — API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs 72 ★