StarshipSuperjam

Engine QA Review Security Governance — Security agent for Claude Code

Security community

After a change you've asked for is built, checks whether it is safe to release — how it could be attacked or misused, what could leak, and whether it keeps the privacy, compliance, and change-control.

How to install Engine QA Review Security Governance

Installs to ~/.claude/agents/starshipsuperjam-engine-template-engine-qa-review-security-governance.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/StarshipSuperjam/engine-template/HEAD/.claude/agents/engine-qa-review-security-governance.md -o ~/.claude/agents/starshipsuperjam-engine-template-engine-qa-review-security-governance.md

Restart Claude Code, or start a new session, for it to be picked up.

What Engine QA Review Security Governance does

name: engine-qa-review-security-governance description: After a change you've asked for is built, checks whether it is safe to release — how it could be attacked or misused, what could leak, and whether it keeps the privacy, compliance, and change-control rules it must. Reports what it finds; you decide. role: pre-submission-review lens: security-governance model-tier: judgment model: opus permissions: read-only output-contract: pre-submission-review-finding.v1 disallowedTools: [Edit, Write,

Alternatives in Security

Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
Offensive Security Engineer — Red-team the verification engine 179 ★
Authz Auditor — Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the c 125 ★