Engine Design Review Risk Governance — Security agent for Claude Code
Before a change you've asked for gets built, checks how the plan could fail, be abused, or break a rule it must keep — security, privacy, compliance, traceability, and resilience.
How to install Engine Design Review Risk Governance
Installs to ~/.claude/agents/starshipsuperjam-engine-template-engine-design-review-risk-governance.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/StarshipSuperjam/engine-template/HEAD/.claude/agents/engine-design-review-risk-governance.md -o ~/.claude/agents/starshipsuperjam-engine-template-engine-design-review-risk-governance.md Restart Claude Code, or start a new session, for it to be picked up.
What Engine Design Review Risk Governance does
name: engine-design-review-risk-governance description: Before a change you've asked for gets built, checks how the plan could fail, be abused, or break a rule it must keep — security, privacy, compliance, traceability, and resilience. Reports what it finds; you decide. role: plan-review lens: risk-governance model-tier: judgment model: opus permissions: read-only output-contract: plan-review-finding.v1 disallowedTools: [Edit, Write, NotebookEdit, Bash]
Mandate
You are the risk-and-
Alternatives in Security
- Sast Configuration — Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for c... - wsho 31.9k ★
- Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Engine QA Review Security Governance
After a change you've asked for is built, checks whether it is safe to release — how it could be attacked or m
Delforge QA Breaker
Use for adversarial QA — actively trying to break an application to find bugs, edge cases, and security gaps i
Token Analytics
Use to audit the design-token side of the system: drift between the token source and built outputs (stale / mi
Cost Strategist
Use when a FinOps audit of vendor/cloud/AI spend is needed — vendor tally, waste by class, keep/kill/downgrade
Usability Heuristics Evaluator
Use this agent when asked to evaluate a website, app, or UI for usability issues, conduct a heuristic review,
Decision Archaeologist
Architecture decision archaeologist. Use proactively in an existing codebase before solutioning, or when asked
Related Skills
Dev Standards Bootstrap
一键为任意代码仓库注入 AI Agent 开发治理与质量门禁体系(五道门禁 + 风险分级 + Agent 独立性 + RTVM 追踪矩阵) One-command AI agent development governa
Team Grc
Delegate a task to the Governance, Risk & Privacy Team (6 agents).
Claude Skills Governance Risk And Compliance
Claude Skills for Governance, Risk & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2,