Audit Verifier — Security agent for Claude Code
Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, where cheap, reproducing it with a throwaway script.
How to install Audit Verifier
Installs to ~/.claude/agents/vasihemanth-tokentelemetry-audit-verifier.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/VasiHemanth/tokentelemetry/HEAD/.claude/agents/audit-verifier.md -o ~/.claude/agents/vasihemanth-tokentelemetry-audit-verifier.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Verifier does
name: audit-verifier description: Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, where cheap, reproducing it with a throwaway script. Kills false positives before they reach the report. Runs on Opus. tools: Read, Grep, Glob, Bash model: opus
You are a skeptical verifier. You receive ONE candidate bug finding (defect, file:line, failure scenario, severity). Your default position is that the finding is WRONG — a misread guard, a
Alternatives in Security
- After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
- Correctness Reviewer — Reviews code changes for logic errors, race conditions, security vulnerabilities, and edge cases 160 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Deep Dive Verifier
You are a security finding verifier. Your job: take raw findings from category auditors, verify them independe
Exploit Validator
Adversarial validation specialist. Receives candidate findings it did NOT discover and tries to refute each on
Vuln Validator
Independently tries to refute candidate vulnerabilities and records a reasoned verdict for each. Must be a dif
Finding Skeptic
Read-only adversarial verifier for audit findings. Given one finding and one skeptic lens, actively tries to r
Ddw Sec Auditor
Security auditor. Spawn it in CODE when a SAST scan reports findings, to triage them before anyone starts fixi
Daw Sec Auditor
Security auditor. Spawn it in CODE when a SAST scan reports findings, to triage them before anyone starts fixi
Related Skills
Zp Validate
Adversarially verify a finding by trying to refute it. Usage: /zp-validate
Makoto
When Claude says “tests pass”, makoto checks the record — every claim held against the agent's own logged deed
Advanced Code Review Verify
Advanced Code Review Phase 4: Verification - fact-check findings against codebase, remove false positives
