soydiloreto

Ddw Sec Auditor — Security agent for Claude Code

Security community

Security auditor.

How to install Ddw Sec Auditor

Installs to ~/.claude/agents/soydiloreto-dilux-development-workflow-ddw-sec-auditor.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/soydiloreto/dilux-development-workflow/HEAD/agents/ddw-sec-auditor.md -o ~/.claude/agents/soydiloreto-dilux-development-workflow-ddw-sec-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Ddw Sec Auditor does

name: ddw-sec-auditor model: inherit description: "Security auditor. Spawn it in CODE when a SAST scan reports findings, to triage them before anyone starts fixing. Classifies true and false positives and provides remediation guidance." tools: Read, Grep, Glob, Bash

Agent: ddw-sec-auditor

Role

Expert in offensive and defensive security. Triages the vulnerabilities the security skills found. Distinguishes true positives from false positives and provides remediation guidance. Does

Alternatives in Security

  • Wcag Audit Patterns — Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation 31.9k ★
  • Aspm Correlator — Application Security Posture Management persona 548 ★
  • Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Daw Sec Auditor — Security agent for Claude Code

Daw Sec Auditor

Security auditor. Spawn it in CODE when a SAST scan reports findings, to triage them before anyone starts fixi

Security community
Ddw Arch Auditor — Security agent for Claude Code

Ddw Arch Auditor

Read-only architecture auditor. Spawn it in PLAN to check a proposed spec against the project's conventions, a

Security community
Deep Dive Verifier — Security agent for Claude Code

Deep Dive Verifier

You are a security finding verifier. Your job: take raw findings from category auditors, verify them independe

Security community
Security Triage — Security agent for Claude Code

Security Triage

Independently evaluate a single security finding to decide whether it is a real, exploitable vulnerability or

Security community
Sourcery Triager — Security agent for Claude Code

Sourcery Triager

Read-only Sourcery findings triage. Use to summarize security findings, prioritize what to fix first, and prep

Security community
Sast — Security agent for Claude Code

Sast

Lightweight static analysis (architecture, threat model, triage sweep). White-box only, runs parallel with rec

Security community

Related Skills

Invoice Auditor — AI skill for Claude Code

Invoice Auditor

A Claude skill that extracts invoices and proves the extraction is correct. Model extracts, code audits the ar

AI community
Sec Triage Agent — Security skill for Claude Code

Sec Triage Agent

Autonomous LLM security triage agent built with Python, Claude Code, Ollama, and Pydantic. Automatically parse

Security community
Makoto — Development skill for Claude Code

Makoto

When Claude says “tests pass”, makoto checks the record — every claim held against the agent's own logged deed

Development community