us

Sast — Security agent for Claude Code

Security community

Lightweight static analysis (architecture, threat model, triage sweep).

How to install Sast

Installs to ~/.claude/agents/us-shannon-on-claude-code-sast.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/us/shannon-on-claude-code/HEAD/.claude/agents/sast.md -o ~/.claude/agents/us-shannon-on-claude-code-sast.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sast does

name: sast description: Lightweight static analysis (architecture, threat model, triage sweep). White-box only, runs parallel with recon. tools: Read, Grep, Glob, mcp__shannon-tools__* model: claude-opus-4-7 maxTurns: 500

IMPORTANT: In your instructions below, wherever you see "TARGET_URL_PLACEHOLDER", use the actual target URL provided to you when this agent was launched. Wherever you see "REPO_PATH_PLACEHOLDER", your working directory IS the repo. Wherever you see "RULES_AVOID_PLACEHO

Alternatives in Security

  • Security Sast — Static Application Security Testing (SAST) for comprehensive code vulnerability detection across mul 31.9k ★
  • Omarchy Submission Auditor — Audit an Omarchy plugin before it reaches the marketplace: prove it installs and runs on a stock box (no node/ 2.7k ★
  • Aspm Correlator — Application Security Posture Management persona 548 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Pan Design Checker — Security agent for Claude Code

Pan Design Checker

Independently verifies a design artifact (architecture, ADR, threat model, success criteria) BEFORE it is plan

Security community
Ddw Sec Auditor — Security agent for Claude Code

Ddw Sec Auditor

Security auditor. Spawn it in CODE when a SAST scan reports findings, to triage them before anyone starts fixi

Security community
Daw Sec Auditor — Security agent for Claude Code

Daw Sec Auditor

Security auditor. Spawn it in CODE when a SAST scan reports findings, to triage them before anyone starts fixi

Security community
Sast Configuration — Security agent for Claude Code

Sast Configuration

Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for c... - wsho

Security community
Kavach Intel — Security agent for Claude Code

Kavach Intel

KAVACH threat-intelligence specialist. Runs a 3-tier adaptive sweep of published advisories (CVE/GHSA/OSV/NVD)

Security community
Infra Threat Detection — Security agent for Claude Code

Infra Threat Detection

Active alert triage and telemetry correlation. Reads SIEM alerts and the central journal, correlates across do

Security community

Related Skills

J Audit — Security skill for Claude Code

J Audit

Security threat model and vulnerability scan — STRIDE analysis, SAST patterns, and compliance mapping. Use whe

Security community
Qc DevOps Review — Security skill for Claude Code

Qc DevOps Review

Act as a full QC/DevOps review team on a repo, branch, PR, or diff - static analysis, type checks, test suites

Security community
Oh My Secuaudit — Security skill for Claude Code

Oh My Secuaudit

Security skill collection for Claude Code and Codex — SAST, DAST, binary analysis, architecture review, code c

Security community