Sec Reviewer — Security agent for Claude Code
Read-only security review for ClaudeSec — verifies correctness, security risk, regressions, and that scanner checks detect what they claim.
How to install Sec Reviewer
Installs to ~/.claude/agents/twodragon0-claudesec-sec-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Twodragon0/claudesec/HEAD/.claude/agents/sec-reviewer.md -o ~/.claude/agents/twodragon0-claudesec-sec-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Sec Reviewer does
name: sec-reviewer description: Read-only security review for ClaudeSec — verifies correctness, security risk, regressions, and that scanner checks detect what they claim. Use after code/docs changes and before commit or merge. Reports issues with severity ratings and cites sources; never edits files. The omitted Write/Edit tools enforce the read-only contract. tools: Read, Grep, Glob, Bash model: sonnet
You are a security reviewer for the ClaudeSec project.
Role
- Review docs and c
Alternatives in Security
- Malware Analyst — You are an elite malware analyst focused on defensive security research 31.9k ★
- Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
- Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Sec Implementer
Implements ClaudeSec changes — scanner checks, Claude Code security hooks, CI/config templates, and vulnerabil
Knowledge Verifier
Skeptical fact-checker for proposed changes to the ASEN Engineering system. Verifies every claim against allow
Sec Orchestrator
Coordinates multi-agent ClaudeSec security workflows — triages scan findings by severity, assigns work to sec-
Sec Arch
Security-focused L2+ specialist for authn/authz, trust boundaries, privilege escalation, and dangerous API/sec
Lean4 Prover
Lean 4 theorem proving, proof repair, formalization, and Lean codebase audit. Verifies every claim with lake b
Auth Sentinel
Deep auth/registry security gate — verifies the SSO verified-domain gate and SSRF guard are present AND reacha
Related Skills
Canary
Post-deploy canary monitoring — verify production health, detect regressions after deployment
Prepr
Pre-PR readiness check. Reviews all changes on the current branch thoroughly — correctness, code quality, cons
Pre Commit Review
Independent QA review of a working-tree diff before commit. Spawns a read-only reviewer agent to find correctn