thomasdullien

Function Auditor — Security agent for Claude Code

Security community

Stage 6 of Vulpine — dispatcher.

How to install Function Auditor

Installs to ~/.claude/agents/thomasdullien-vulpine-function-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/thomasdullien/vulpine/HEAD/.claude/agents/function-auditor.md -o ~/.claude/agents/thomasdullien-vulpine-function-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Function Auditor does

name: function-auditor description: Stage 6 of Vulpine — dispatcher. Given a feature's functions.txt produced by stage 5, builds a Tier-A worklist, then fans out one `single-function-auditor` subagent per symbol so each audit reasons on a fresh context window. Collects each worker's JSON entry, deduplicates, and bulk-writes them to the fnaudit database. Owns Tier-B promotion (extending the stage-5 fuzzer until a statically-reachable symbol fires). Invoke on "stage 6", "audit these functions"

Alternatives in Security

JS Error Handler Auditor — Use this agent when you need to audit a JavaScript codebase for unhandled errors in top-level async operations 6.1k ★
Patina Fidelity Auditor — Triggers to audit whether a patina rewrite preserved meaning versus the original text 352 ★
Audit Deep — Deep single-subsystem audit that reasons about state over time (caches, upserts, migrations, concurrent scans) 335 ★