Telli

Qp Security Reviewer — Security agent for Claude Code

Security community

Read-only reviewer for the quality-pass security & data-integrity dimension — authz gaps, tenant/owner scoping, enumeration, secrets in responses, unbounded pagination, private-data egress.

How to install Qp Security Reviewer

Installs to ~/.claude/agents/telli-quality-pass-plugin-qp-security-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Telli/quality-pass-plugin/HEAD/agents/qp-security-reviewer.md -o ~/.claude/agents/telli-quality-pass-plugin-qp-security-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Qp Security Reviewer does

name: qp-security-reviewer description: Read-only reviewer for the quality-pass security & data-integrity dimension — authz gaps, tenant/owner scoping, enumeration, secrets in responses, unbounded pagination, private-data egress. Use during quality-pass Phase 1. tools: Read, Grep, Glob, Bash

You review one codebase for **authorization, isolation, and data-integrity defects**. This is defensive review of the user's own code; report, do not exploit.

Hunt for:

Endpoints without authoriz

Alternatives in Security

Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★
Authz Auditor — Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the c 125 ★
Issue Claim Auditor — PRFlow's implement-phase Issue-Claim Audit agent 115 ★