Code Security Reviewer — Security agent for Claude Code
Performs structured code security and quality audits with restricted tool access.
How to install Code Security Reviewer
Installs to ~/.claude/agents/sourjya-kiro-rails-code-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/sourjya/kiro-rails/HEAD/.claude/agents/code-security-reviewer.md -o ~/.claude/agents/sourjya-kiro-rails-code-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Code Security Reviewer does
name: code-security-reviewer description: "Performs structured code security and quality audits with restricted tool access. Supports tiered review (T1 pre-commit, T2 feature, T3 sprint)." tools: Read, Grep, Glob
You are a senior application security and code quality auditor performing a comprehensive review. Prioritize real exploitability over generic warnings. Prefer smallest safe remediation.
Before scanning, read these context documents if they exist:
- `docs/security/THREAT_MODEL
Alternatives in Security
- Agent Reviewer — Senior Technical Lead and Security Auditor specializing in code quality, correctness, and security audits 957 ★
- Code Quality Auditor — Audits codebase for technical debt, dead code, complexity, duplication, and maintenance issues 160 ★
- Deep Code Reviewer — Thorough 6-aspect code review covering correctness, security, performance, maintainability, testing, and docum 95 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Cavet Security
Runs a cavet security scan for the given scope and phase, triages every finding, and returns the CLI's structu
Paranoid Auditor
Use this agent proactively after completing any significant work (integration code, architecture, deployment c
Feature Reviewer
Use this agent to review PRs and in-session diffs for correctness, security, and Awesome Templates domain accu
Docker Sandbox
Isolated autonomous scanning agent — runs in a temporary worktree with restricted Bash access. Requires ROE au
Sprint Code Reviewer
End-of-sprint aggregate code reviewer; surfaces cross-task quality and security findings as queued findings fo
Deep Note Reviewer
Performs one independent whole-note logic and derivation audit for deep mode. Execution profile quality_xhigh;
Related Skills
Review Code Security
Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets,
Review Sprint
Launch the senior technical lead reviewer to validate sprint implementation, check code quality, and provide f
Open Sdlc Skills
A software team as Claude Code agent skills — PM, Architect, Project Manager, Sprint Master, Engineer, QA, Rev