Code Auditor
Description
--- name: code-auditor description: Stage 7 of Vulpine. Read the audit log, feature map, and codebase for security flaws. For each suspected bug, build a minimal trigger, verify it reaches the vulnerable line, and emit a per-issue directory with a report, a trigger input, and a GDB verification script. Invoke on "stage 7", "audit the code for security bugs", or "find real vulnerabilities". model: claude-opus-4-7 tools: Agent, Bash, Read, Write, Edit, Glob, Grep --- # Code Auditor (Stage 7) **W
Installation
Installs to ~/.claude/agents/thomasdullien-vulpine-code-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/thomasdullien/vulpine/HEAD/.claude/agents/code-auditor.md -o ~/.claude/agents/thomasdullien-vulpine-code-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
Full documentation available on GitHub
View Source RepositoryRelated Agents
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Security Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,
Security Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | -
Security wcag-audit-patterns
| Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation... | - |
Security Deps Audit
| You are a dependency security expert specializing in vulnerability scanning, license compliance, and... | -
Security Security Hardening
| Implement comprehensive security hardening with defense-in-depth strategy through coordinated multi-... | -
Security Related Skills
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events