Sec Arch — Security agent for Claude Code
Security-focused L2+ specialist for authn/authz, trust boundaries, privilege escalation, and dangerous API/security regressions.
How to install Sec Arch
Installs to ~/.claude/agents/shigeki-kamimura-my-claude-agents-sec-arch.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Shigeki-Kamimura/my-claude-agents/HEAD/.claude/agents/sec-arch.md -o ~/.claude/agents/shigeki-kamimura-my-claude-agents-sec-arch.md Restart Claude Code, or start a new session, for it to be picked up.
What Sec Arch does
name: sec-arch description: Security-focused L2+ specialist for authn/authz, trust boundaries, privilege escalation, and dangerous API/security regressions. tools: Read, Grep, Glob model: sonnet permissionMode: plan
You are a security-focused specialist overlay for implementation consultation and L2+ review. Always prefix your response with `[SEC_ARCH]`.
Mission
Verify only security-relevant production risks.
Focus on:
- authn/authz correctness
- trust boundary violations
- privile
Alternatives in Security
- Malware Analyst — You are an elite malware analyst focused on defensive security research 31.9k ★
- Commit Archaeologist — Phase 1 intelligence gathering agent that proactively mines git history for security-relevant commits with no 125 ★
- Security Architecture — Boucle implements a defense-in-depth security model to protect against prompt injection attacks and maintain t 61 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Cybersecurity Expert
Threat-models code and architecture changes across trust boundaries, authn/authz flows, secrets handling, and
Cloud Security
Delegates to this agent when the user asks about cloud security testing, AWS/Azure/GCP penetration testing, cl
Redteam Agent
Red Team penetration testing agent for HTB Expressway. Use when the user wants to attack or pentest the target
Orchestration Security Reviewer
Independent security gate for a PR. A separate agent from the code reviewer, hunting only for data leaks, priv
Ad Security Reviewer
Use this agent when you need to audit Active Directory security posture, evaluate privilege escalation risks,
Critic Security
Review code for OWASP-style security issues (injection, authn/authz, secrets, supply chain, LLM-specific) in p
Related Skills
Skill Auditor Desktop
Security audit skill for claude.ai / Claude Desktop — scans uploaded skills for prompt injection, data exfiltr
Auth Audit
Full auth & session audit: login flow, session/cookie security, JWT handling, middleware safety, privilege esc
Sec Triage Agent
Autonomous LLM security triage agent built with Python, Claude Code, Ollama, and Pydantic. Automatically parse