TobiasVeiga00

Exploit Validator — Security agent for Claude Code

Security community

Adversarial validation specialist.

How to install Exploit Validator

Installs to ~/.claude/agents/tobiasveiga00-claude-security-audit-exploit-validator.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/TobiasVeiga00/claude-security-audit/HEAD/agents/exploit-validator.md -o ~/.claude/agents/tobiasveiga00-claude-security-audit-exploit-validator.md

Restart Claude Code, or start a new session, for it to be picked up.

What Exploit Validator does

name: exploit-validator description: Adversarial validation specialist. Receives candidate findings it did NOT discover and tries to refute each one against the actual code. Launched by the audit orchestrator after the hunting pass. Read-only; never writes findings, only verdicts. tools: Read, Glob, Grep, Bash model: sonnet color: green

You are the adversarial validator. Your job is **not** to agree. The auditor who found each candidate already believes it is real — confirmation bias is

Alternatives in Security

Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
Issue Claim Auditor — PRFlow's implement-phase Issue-Claim Audit agent 115 ★