Trisakion Security Audit Agent — Security agent for Claude Code
보안 취약점(trisakion-dev-convention-skill 14장) — S2S HMAC 인증(14.1), SQL Injection(14.2), 비밀번호 저장(14.3), XSS/CSRF/httpOnly 쿠키/내부 정보 노출(14.4) 네 관점을 코드에서 점검한다.
How to install Trisakion Security Audit Agent
Installs to ~/.claude/agents/trisakion0500-trisakion-dev-convention-skill-trisakion-security-audit-agent.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/trisakion0500/trisakion-dev-convention-skill/HEAD/agents/trisakion-security-audit-agent.md -o ~/.claude/agents/trisakion0500-trisakion-dev-convention-skill-trisakion-security-audit-agent.md Restart Claude Code, or start a new session, for it to be picked up.
What Trisakion Security Audit Agent does
name: trisakion-security-audit-agent description: 보안 취약점(trisakion-dev-convention-skill 14장) — S2S HMAC 인증(14.1), SQL Injection(14.2), 비밀번호 저장(14.3), XSS/CSRF/httpOnly 쿠키/내부 정보 노출(14.4) 네 관점을 코드에서 점검한다. 새 API 엔드포인트·SP·인증/쿠키 관련 코드를 추가/변경한 뒤, 커밋 전 리뷰 단계에서 명시적으로 호출해 사용한다. 기본적으로 아직 커밋되지 않았거나 최근 변경된 파일만 대상으로 삼아 토큰을 아낀다. 동시성·멱등성·상태전이는 trisakion-race-condition-checker, 배치/크론 인스턴스·라이프사이클은 trisakion-batch-lifecycle-auditor, SP 네이밍·권한체크·RESULT 반환 등 4장 컨벤션은 trisakion-sp-convention-validator, 전역 테이블 잠금순
Alternatives in Security
- GraphQL Audit — GraphQL API security specialist 812 ★
- Security Audit Analyzer — Комплексный анализ безопасности веб-приложений с JavaScript frontend и PHP backend 571 ★
- Convention Auditor — Audits codebase for convention violations including naming, logging, configuration, imports, and error handlin 160 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Ehs Web API
Web, backend and API security specialist for the Ethical Hacker Squad. Reviews authentication, object- and fun
Agentille Security Reviewer
Reviews changed code for security issues — secret leaks, injection vectors, auth bypass, unsafe deserializatio
DotNet Code Reviewer
Use this agent for systematic code review, security audit, and performance optimization of C#/.NET projects sp
Security Audit Agent
자바 코드 보안 취약점 검증 전문. Refactor 작업 직후 또는 git commit 직전 호출. OWASP Top 10 + Secret Scan (trufflehog/ggshield) + Pro
Chadi Security
Security review subagent for auth, RBAC, inputs, uploads, secrets, APIs, database access, XSS, CSRF, CSP, depe
Audit Security
Use this agent to conduct a security audit (CISO perspective) of a codebase: auth bypasses, CSRF, prompt injec
Related Skills
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Vibesec
Helps write secure code by preventing common vulnerabilities including IDOR, XSS, SQL injection, SSRF, and wea
Security Guidance
Hook that warns about command injection, XSS, and unsafe patterns