Code Security Reviewer — Security agent for Claude Code
Performs structured code security and quality audits with restricted tool access.
How to install Code Security Reviewer
Installs to ~/.claude/agents/sourjya-kiro-rails-code-security-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/sourjya/kiro-rails/HEAD/.claude/agents/code-security-reviewer.md -o ~/.claude/agents/sourjya-kiro-rails-code-security-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Code Security Reviewer does
name: code-security-reviewer description: "Performs structured code security and quality audits with restricted tool access. Supports tiered review (T1 pre-commit, T2 feature, T3 sprint)." tools: Read, Grep, Glob
You are a senior application security and code quality auditor performing a comprehensive review. Prioritize real exploitability over generic warnings. Prefer smallest safe remediation.
Before scanning, read these context documents if they exist:
- `docs/security/THREAT_MODEL
Alternatives in Security
- Agent Reviewer — Senior Technical Lead and Security Auditor specializing in code quality, correctness, and security audits 957 ★
- Code Quality Auditor — Audits codebase for technical debt, dead code, complexity, duplication, and maintenance issues 160 ★
- Deep Code Reviewer — Thorough 6-aspect code review covering correctness, security, performance, maintainability, testing, and docum 95 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Cavet Security
Runs a cavet security scan for the given scope and phase, triages every finding, and returns the CLI's structu
Docker Sandbox
Isolated autonomous scanning agent — runs in a temporary worktree with restricted Bash access. Requires ROE au
Paranoid Auditor
Use this agent proactively after completing any significant work (integration code, architecture, deployment c
Feature Reviewer
Use this agent to review PRs and in-session diffs for correctness, security, and Awesome Templates domain accu
Sprint Code Reviewer
End-of-sprint aggregate code reviewer; surfaces cross-task quality and security findings as queued findings fo
Deep Note Reviewer
Performs one independent whole-note logic and derivation audit for deep mode. Execution profile quality_xhigh;
Related Skills
Review Code Security
Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets,
Review Sprint
Launch the senior technical lead reviewer to validate sprint implementation, check code quality, and provide f
Open Sdlc Skills
A software team as Claude Code agent skills — PM, Architect, Project Manager, Sprint Master, Engineer, QA, Rev