vigolium

Authz Auditor

Name: Authz Auditor
Author: vigolium

Security community

SOURCE https://github.com/vigolium/piolium/blob/main/agents/authz-auditor.md

Description

--- name: authz-auditor tools: Glob, Grep, Read, Bash, Write, Edit model: sonnet color: magenta permissionMode: bypassPermissions effort: medium description: Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the codebase, extracts declared guards and in-body authz logic, builds an authorization matrix, then systematically hunts for IDOR/BOLA, vertical privilege escalation, tenant-isolation bypass, mass assignment, and inconsistent-guard vuln

Installation

Installs to ~/.claude/agents/vigolium-piolium-authz-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/vigolium/piolium/HEAD/agents/authz-auditor.md -o ~/.claude/agents/vigolium-piolium-authz-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.