thomasdullien

Code Auditor — Security agent for Claude Code

Security community

Stage 7 of Vulpine.

How to install Code Auditor

Installs to ~/.claude/agents/thomasdullien-vulpine-code-auditor.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/thomasdullien/vulpine/HEAD/.claude/agents/code-auditor.md -o ~/.claude/agents/thomasdullien-vulpine-code-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Code Auditor does

name: code-auditor description: Stage 7 of Vulpine. Read the audit log, feature map, and codebase for security flaws. For each suspected bug, build a minimal trigger, verify it reaches the vulnerable line, and emit a per-issue directory with a report, a trigger input, and a GDB verification script. Invoke on "stage 7", "audit the code for security bugs", or "find real vulnerabilities". model: claude-opus-4-7 tools: Agent, Bash, Read, Write, Edit, Glob, Grep

Code Auditor (Stage 7)

**W

Alternatives in Security

  • Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
  • Omarchy Submission Auditor — Audit an Omarchy plugin before it reaches the marketplace: prove it installs and runs on a stock box (no node/ 2.7k ★
  • Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Vuln Reach — Security agent for Claude Code

Vuln Reach

Decides whether a target actually reaches the vulnerable code of a vulnerable dependency (OSV advisory), citin

Security community
Session Reviewer — Security agent for Claude Code

Session Reviewer

Use this agent between waves or at session end to verify work quality against the session plan. Checks impleme

Security community
Verify Implementation — Security agent for Claude Code

Verify Implementation

Independently reviews a finished implementation — a PR produced by implement-issue — against its issue's accep

Security community
Function Auditor — Security agent for Claude Code

Function Auditor

Stage 6 of Vulpine — dispatcher. Given a feature's functions.txt produced by stage 5, builds a Tier-A worklist

Security community
Dotnet Aspnetcore Specialist — Security agent for Claude Code

Dotnet Aspnetcore Specialist

WHEN analyzing ASP.NET Core middleware, request pipelines, minimal API design, DI lifetime selection, or diagn

Security community
POC Builder — Security agent for Claude Code

POC Builder

Build a minimal proof of concept for a confirmed security finding. Writes a failing test, a small script, or a

Security community

Related Skills

Ix Debug — Development skill for Claude Code

Ix Debug

Root cause analysis — trace execution path to a failure, narrow candidates, read minimal source only at suspec

Development community
Security Auditor — Security skill for Claude Code

Security Auditor

Audits code for OWASP-class vulnerabilities — injection, auth flaws, secret leaks, unsafe deserialization.

Security community
Exploit Confirm — Security skill for Claude Code

Exploit Confirm

Prove a SUSPECTED finding with one targeted, SOC-stealth, operator-supervised confirmation probe (confirm_ too

Security community