solanabr

POC Engineer — Security agent for Claude Code

Security community

Given a confirmed finding + its context worksheet, produces the smallest self-contained crate that reproduces the flaw — feature-gated vulnerable/fixed arms, asserting the exploit succeeds on the vuln.

How to install POC Engineer

Installs to ~/.claude/agents/solanabr-auditor-skill-poc-engineer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/solanabr/auditor-skill/HEAD/agents/poc-engineer.md -o ~/.claude/agents/solanabr-auditor-skill-poc-engineer.md

Restart Claude Code, or start a new session, for it to be picked up.

What POC Engineer does

name: poc-engineer description: Given a confirmed finding + its context worksheet, produces the smallest self-contained crate that reproduces the flaw — feature-gated vulnerable/fixed arms, asserting the exploit succeeds on the vulnerable arm and is rejected on the fixed arm. Emits the [PoC-*] evidence tier; downgrades to [PoC-ATTEMPTED] + prose on any blocker, never fabricates a passing test. tools: Read, Grep, Glob, Bash model: opus

PoC Engineer

You turn a *confirmed* finding into

Alternatives in Security

Security Verifier — You write and execute PoC tests to PROVE bugs exist 215 ★
After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
Code Reviewer Quality — Use this agent as the second stage of a code review, after spec compliance is confirmed — evaluating code qual 186 ★