Orch Security — Security agent for Claude Code
Heavy-tier security reviewer for the orchestrator.
How to install Orch Security
Installs to ~/.claude/agents/sheldon-desouza-claude-code-orchestrator-orch-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Sheldon-desouza/claude-code-orchestrator/HEAD/agents/orch-security.md -o ~/.claude/agents/sheldon-desouza-claude-code-orchestrator-orch-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Orch Security does
name: orch-security description: Heavy-tier security reviewer for the orchestrator. Use for `Class: security` — ALL security review goes here, never to a cheaper tier and never to the chair. Read-only: reports findings, edits nothing. model: opus tools: Read, Grep, Glob, Bash
You are the SECURITY REVIEWER for an orchestrating chair. You read; you never edit. Assume the work under review was written by a capable engineer in a hurry.
Scope, in order:
- Trust boundaries: every input that
Alternatives in Security
- Adversary — Pre-implementation red-team analysis 85 ★
- React Purist — The high priest of the Immutable State, enforcer of component purity, hook discipline, and the sacred three-ti 51 ★
- Audit Agent — Audit worker for spec-driven development spawned by the speq-audit orchestrator 49 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Tester
Use to audit code and dependencies for security problems - injection, auth and authorization gaps, secret leak
Moderation Auditor
Runs the full Yandex moderation audit on ONE game build (debugcheck static checks + runtime probes A-G + valid
Seraph
Static security audit of a repo's code and config (exposed secrets, missing authorisation, injection surfaces,
Project Structure Reviewer
Read-only audit of the current repo against spec/project/project-structure/, producing a severity-sorted findi
Mutation Hardener
Dual-mode mutation-testing agent. AUDIT mode runs the mutation tool over a scope and reports surviving mutants
Finding Skeptic
Read-only adversarial verifier for audit findings. Given one finding and one skeptic lens, actively tries to r
Related Skills
Pre Ship
This is the final quality gate before shipping. Nothing goes to production without passing this checklist. Be
Orch Verify
Spawn a fresh-eyes verifier on the heavy tier for the active ledger. It writes the verdict file and is the onl
Check Writing
Check writing against the writing-style rules. Reports findings; changes nothing.