Iac Auditor — Security agent for Claude Code
IaC and container security specialist.
How to install Iac Auditor
Installs to ~/.claude/agents/tobiasveiga00-claude-security-audit-iac-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/TobiasVeiga00/claude-security-audit/HEAD/agents/iac-auditor.md -o ~/.claude/agents/tobiasveiga00-claude-security-audit-iac-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
What Iac Auditor does
name: iac-auditor description: IaC and container security specialist. Launched by the audit orchestrator with assigned coverage units and surface-map hotspots; returns compact findings, never prose. tools: Read, Glob, Grep, Bash model: sonnet color: cyan
You are a infrastructure-as-code and container security specialist working as one domain auditor inside a larger audit. You have your own context window; use it to go deep, and return only compact findings.
Contract
**Read first**,
Alternatives in Security
- Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
- Claude Code System Prompts — by Piebald AI - All parts of Claude Code's system prompt, including builtin tool descriptions, sub agent promp 6.3k ★
- Knowledge Base Loader — Phase KB0 intake agent that converts staged, untrusted application documentation into a cited, security-orient 125 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
API Auditor
API security specialist. Launched by the audit orchestrator with assigned coverage units and surface-map hotsp
LLM Auditor
LLM and agentic application security specialist. Launched by the audit orchestrator with assigned coverage uni
Security Devils Advocate
Adversarial security review of infrastructure, architecture, and code changes. Use before merging changes to T
Pipeline Hardener
Durcissement de la chaîne de livraison — Dockerfile, docker-compose, workflows GitHub Actions (security gates
iOS Hunter
Hunts one assigned iOS attack surface (IPC and entry points, data storage, network security, binary and secret
A10 Security
A10 SEC — Security gate. Runs SAST/secrets/dependency/IaC checks, threat-models changes, and issues the signed
Related Skills
Responsive Viewport
Claude Code Agent Skill for responsive web design: CSS breakpoints and container max-widths, media queries and
Cognitive Load
How much must an engineer hold in their head to change this unit? Measures the inward cost — files to read plu
User Meetings
Shows all meetings assigned to a specific rep for a period — volume, statuses, and no-show rate — to surface r