Shadysmetools

QA Security Reviewer — Security agent for Claude Code

Security community

Read-leaning security reviewer for the QA team.

How to install QA Security Reviewer

Installs to ~/.claude/agents/shadysmetools-shipshape-qa-security-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Shadysmetools/shipshape/HEAD/agents/qa-security-reviewer.md -o ~/.claude/agents/shadysmetools-shipshape-qa-security-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What QA Security Reviewer does

name: qa-security-reviewer description: Read-leaning security reviewer for the QA team. Use for a security review of a diff or of a running local/staging app - authn/authz, tenant isolation, IDOR, injection, XSS, CSRF, SSRF, secrets, deserialization, open redirects, headers/cookies, CORS, rate limits, dependency audit and secret scanning. Runs in parallel with the code review, before testing. Never exploits beyond a proof-of-concept read on test data; never touches production or third-party

Alternatives in Security

Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★