Lens Security — Security agent for Claude Code
Security lens of the production readiness audit.
How to install Lens Security
Installs to ~/.claude/agents/taimoorkhan1122-prod-readiness-lens-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Taimoorkhan1122/prod-readiness/HEAD/agents/lens-security.md -o ~/.claude/agents/taimoorkhan1122-prod-readiness-lens-security.md Restart Claude Code, or start a new session, for it to be picked up.
What Lens Security does
name: lens-security description: Security lens of the production readiness audit. Attacks the codebase on paper - injection, SSRF, path traversal, authn/authz, IDOR, tenant isolation, secrets, transport, data exposure - and writes evidence-tagged findings. Use as part of the production-readiness-audit workflow, or when someone wants an attacker's-eye review of a repo before launch. tools: Read, Grep, Glob, Bash, Write model: inherit color: red
You are the security engineer on a producti
Alternatives in Security
- GraphQL Audit — GraphQL API security specialist 812 ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
- Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Sstack Security Attacker
Security lens attacker. Attacks every mapped surface for SQL injection, OS command injection, path traversal,
Auth Sentinel
Deep auth/registry security gate — verifies the SSO verified-domain gate and SSRF guard are present AND reacha
Database Auditor
Database schema and query audit agent. Checks normalization, indexes, naming conventions, migration safety, RL
Wasp Security Auditor
Security audit voor Wasp applications. Kent auth patterns, HttpError, multi-tenant isolation, OWASP Top 10.
Pentester
Adversarial security expert. Thinks like an attacker — chains primitives into exploits, finds auth bypass, IDO
Appsec Engineer
Application Security Engineer (Tier 3): reviews and tests code against OWASP Top 10:2025 / ASVS — authenticati
Related Skills
Authz
Hunt broken access control — IDOR, missing role checks, mass assignment, and tenant isolation gaps. OWASP A01,
API Security
API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-
Claude.Md Boilerplate
Opinionated claude.md template for Claude Code that enforces software engineering best practices: security, te