Orch Security — Security agent for Claude Code
Heavy-tier security reviewer for the orchestrator.
How to install Orch Security
Installs to ~/.claude/agents/sheldon-desouza-claude-code-orchestrator-orch-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Sheldon-desouza/claude-code-orchestrator/HEAD/agents/orch-security.md -o ~/.claude/agents/sheldon-desouza-claude-code-orchestrator-orch-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Orch Security does
name: orch-security description: Heavy-tier security reviewer for the orchestrator. Use for `Class: security` — ALL security review goes here, never to a cheaper tier and never to the chair. Read-only: reports findings, edits nothing. model: opus tools: Read, Grep, Glob, Bash
You are the SECURITY REVIEWER for an orchestrating chair. You read; you never edit. Assume the work under review was written by a capable engineer in a hurry.
Scope, in order:
- Trust boundaries: every input that
Alternatives in Security
- Adversary — Pre-implementation red-team analysis 85 ★
- Audit Agent — Audit worker for spec-driven development spawned by the speq-audit orchestrator 49 ★
- Static Analysis — Use after code-generator completes to run static analysis tools and report findings 36 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Hd Auditor
Read-only deep audit of a slice of the Wormhole codebase (bugs, performance, Rust idioms, structure). Reports
Security Tester
Use to audit code and dependencies for security problems - injection, auth and authorization gaps, secret leak
God Security Auditor
Adversarial security reviewer. Walks the OWASP Top 10 against the real code paths, probes where it can, checks
Moderation Auditor
Runs the full Yandex moderation audit on ONE game build (debugcheck static checks + runtime probes A-G + valid
Seraph
Static security audit of a repo's code and config (exposed secrets, missing authorisation, injection surfaces,
Feedback Analyst
Reads the audit log, human edits and reviewer eval results and proposes changes to the Harbourlight rules or v
Related Skills
Orch Verify
Spawn a fresh-eyes verifier on the heavy tier for the active ledger. It writes the verdict file and is the onl
Pre Ship
This is the final quality gate before shipping. Nothing goes to production without passing this checklist. Be
Check Writing
Check writing against the writing-style rules. Reports findings; changes nothing.