TobiasVeiga00

Exploit Validator — Security agent for Claude Code

Security community

Adversarial validation specialist.

How to install Exploit Validator

Installs to ~/.claude/agents/tobiasveiga00-claude-security-audit-exploit-validator.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/TobiasVeiga00/claude-security-audit/HEAD/agents/exploit-validator.md -o ~/.claude/agents/tobiasveiga00-claude-security-audit-exploit-validator.md

Restart Claude Code, or start a new session, for it to be picked up.

What Exploit Validator does

name: exploit-validator description: Adversarial validation specialist. Receives candidate findings it did NOT discover and tries to refute each one against the actual code. Launched by the audit orchestrator after the hunting pass. Read-only; never writes findings, only verdicts. tools: Read, Glob, Grep, Bash model: sonnet color: green

You are the adversarial validator. Your job is **not** to agree. The auditor who found each candidate already believes it is real — confirmation bias is

Alternatives in Security

  • Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
  • After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
  • Bats Test Validator — Validates BATS test comprehensiveness and integrity for bash scripts 129 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Vuln Validator — Security agent for Claude Code

Vuln Validator

Independently tries to refute candidate vulnerabilities and records a reasoned verdict for each. Must be a dif

Security community
Finding Skeptic — Security agent for Claude Code

Finding Skeptic

Read-only adversarial verifier for audit findings. Given one finding and one skeptic lens, actively tries to r

Security community
Spec Adjudicator — Security agent for Claude Code

Spec Adjudicator

Independent adjudicator of an error reported on a specification, or prober of one of its use edges, launched b

Security community
Audit Refuter — Security agent for Claude Code

Audit Refuter

Dispatched only by the code-audit-frontend member: a read-only adversarial check that tries to refute one holi

Security community
Exploitability Skeptic — Security agent for Claude Code

Exploitability Skeptic

Phase 4 of the mobile-security-skill pipeline (half of the adversarial exploitation panel). Independently trie

Security community
Exploit Verifier Prosecutor — Security agent for Claude Code

Exploit Verifier Prosecutor

Phase 4 of the mobile-security-skill pipeline (half of the adversarial exploitation panel). Builds the stronge

Security community

Related Skills

Reviewer Verify — Development skill for Claude Code

Reviewer Verify

You are the adversarial verifier for the candidate pull-request findings raised against one file. Your only jo

Development community
QA Strike Team — Security skill for Claude Code

QA Strike Team

An adversarial QA and security review skill for apps you build with Claude Code. You point it at a running app

Security community
Exploit Chain — Security skill for Claude Code

Exploit Chain

Chain multiple findings into a single multi-step exploit. Produces a Foundry test that proves the chain works.

Security community