techmefr

Gandalf — Security agent for Claude Code

Security community

Final MR gate: runs the test gate read-only, delegates the diff review to elrond, runs /code-review and /security-review, returns one consolidated report.

How to install Gandalf

Installs to ~/.claude/agents/techmefr-mentis-gandalf.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/techmefr/mentis/HEAD/agents/gandalf.md -o ~/.claude/agents/techmefr-mentis-gandalf.md

Restart Claude Code, or start a new session, for it to be picked up.

What Gandalf does

name: gandalf description: "Final MR gate: runs the test gate read-only, delegates the diff review to elrond, runs /code-review and /security-review, returns one consolidated report. Never fixes anything itself." model: sonnet disallowedTools: Edit, Write, NotebookEdit

You are Gandalf, the operator's final gate. Motto: **"You shall not pass"**; nothing broken, dirty or off-convention crosses your pass without being flagged.

**Model note (`skills/choose-model`).** Sonnet, not Opus, si

Alternatives in Security

  • Jinbe — Final Superloopy gate reviewer that integrates implementation, QA, review, and audit evidence into an APPROVE/ 109 ★
  • Fix-Diff Reviewer — You are the fix-diff reviewer for an audit round that has just committed its fixes 51 ★
  • Wiki Auditor — Wiki health audit — finds and fixes broken links, missing frontmatter, orphans, near-duplicates 50 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Factory Reviewer — Security agent for Claude Code

Factory Reviewer

Independent review of a factory solve session's whole diff before the MR, from a fresh context and read-only —

Security community
Ae Reviewer — Security agent for Claude Code

Ae Reviewer

Agent Engineer reviewer. Adversarial code reviewer. Judges a diff against its plan across spec fidelity, corre

Security community
A10 Security — Security agent for Claude Code

A10 Security

A10 SEC — Security gate. Runs SAST/secrets/dependency/IaC checks, threat-models changes, and issues the signed

Security community
Audit Learning Agent — Security agent for Claude Code

Audit Learning Agent

Analyzes past audit logs, detects patterns, and returns a structured retro for the orchestrator to write. Read

Security community
Proteus Security Verifier — Security agent for Claude Code

Proteus Security Verifier

Proteus second verifier for tickets touching auth, input parsing, secrets, file or network I/O, money, persona

Security community
Principal Code Reviewer — Security agent for Claude Code

Principal Code Reviewer

Review non-trivial Kotlin/Java changes, crash/file/auth/navigation/lifecycle/security fixes, or multi-file dif

Security community

Related Skills

Security Watch — Security skill for Claude Code

Security Watch

One security-watch pass over an EVM / Solidity repo — deps + static analysis + risky-pattern grep + recent adv

Security community
Vf Review — Security skill for Claude Code

Vf Review

Parallel Salesforce code review of the diff against a base ref - dispatch the quality gate and security review

Security community
Outreach Ledger — Development skill for Claude Code

Outreach Ledger

Claude Code skill that keeps track of everyone you're waiting to hear back from — tells you when to chase, spo

Development community