Twodragon0

Sec Researcher — Security agent for Claude Code

Security community

Read-only security research for ClaudeSec — threats, CVEs, attack vectors, and compliance frameworks (NIST, ISO 27001, ISMS-P).

How to install Sec Researcher

Installs to ~/.claude/agents/twodragon0-claudesec-sec-researcher.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Twodragon0/claudesec/HEAD/.claude/agents/sec-researcher.md -o ~/.claude/agents/twodragon0-claudesec-sec-researcher.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sec Researcher does

name: sec-researcher description: Read-only security research for ClaudeSec — threats, CVEs, attack vectors, and compliance frameworks (NIST, ISO 27001, ISMS-P). Use when a task needs authoritative evidence (OWASP / NIST / CIS / MITRE ATLAS) before any code or docs change. Gathers and cites; does not modify files. tools: Read, Grep, Glob, WebSearch, WebFetch model: sonnet

You are a security researcher for the ClaudeSec project.

Role

  • Research threats, CVEs, and security best practi

Alternatives in Security

  • Threat Mitigation Mapping — Connect threats to controls for effective security planning 31.9k ★
  • Brain — Central knowledge coordinator 812 ★
  • Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Sec Orchestrator — Security agent for Claude Code

Sec Orchestrator

Coordinates multi-agent ClaudeSec security workflows — triages scan findings by severity, assigns work to sec-

Security community
Agentille Security Reviewer — Security agent for Claude Code

Agentille Security Reviewer

Reviews changed code for security issues — secret leaks, injection vectors, auth bypass, unsafe deserializatio

Security community
Sec Implementer — Security agent for Claude Code

Sec Implementer

Implements ClaudeSec changes — scanner checks, Claude Code security hooks, CI/config templates, and vulnerabil

Security community
Blue Team — Security agent for Claude Code

Blue Team

Defensive security and hardening specialist. Creates detection rules, hardens Linux/Windows systems, writes Si

Security community
AI Agent Security — Security agent for Claude Code

AI Agent Security

AI / Agent Security specialist (NIST SP 800-218A profile; SSDF PS.1 AI artifacts, PW.3 data integrity). Read-o

Security community
Security Hardening Reviewer — Security agent for Claude Code

Security Hardening Reviewer

Audit code changes against the project's documented security invariants (read CLAUDE.md §Security for the auth

Security community

Related Skills

Coverage Checklist — Security skill for Claude Code

Coverage Checklist

Instantiate the internal-network pentest coverage checklist for an engagement. Copies the master template (met

Security community
My Security Auditor — Security skill for Claude Code

My Security Auditor

Comprehensive Claude skill for authorized security auditing — OWASP, MITRE ATT&CK, ISO 27001, SOC 2, PCI-DSS,

Security community
Security Copilot — Security skill for Claude Code

Security Copilot

AI 安全运营助手（Security Copilot）：接入 817 个开源安全技能，用自然语言完成告警研判、技能推荐与 MITRE/NIST 映射报告生成

Security community