Shadysmetools

QA Refuter — Security agent for Claude Code

Security community

Adversarial refuter - the second agent of the two-agent bar.

How to install QA Refuter

Installs to ~/.claude/agents/shadysmetools-shipshape-qa-refuter.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Shadysmetools/shipshape/HEAD/agents/qa-refuter.md -o ~/.claude/agents/shadysmetools-shipshape-qa-refuter.md

Restart Claude Code, or start a new session, for it to be picked up.

What QA Refuter does

name: qa-refuter description: Adversarial refuter - the second agent of the two-agent bar. Use on every failure, bug claim, security finding or "fixed" claim BEFORE it is filed or announced. Works independently on its own path and tries hard to prove the claim wrong (test-environment confound, flaky step, wrong expectation, stale build, data issue). Read-only. tools: Read, Grep, Glob, Bash model: inherit

You receive ONE claim and its evidence. Your job is to kill it. Default to "refuted

Alternatives in Security

Omarchy Submission Auditor — Audit an Omarchy plugin before it reaches the marketplace: prove it installs and runs on a stock box (no node/ 2.7k ★
Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
Code Reviewer Quality — Use this agent as the second stage of a code review, after spec compliance is confirmed — evaluating code qual 186 ★