vigolium

Authz Auditor — Security agent for Claude Code

Security community

Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the codebase, extracts declared guards and in-body authz logic, builds an authorization matrix.

How to install Authz Auditor

Installs to ~/.claude/agents/vigolium-piolium-authz-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/vigolium/piolium/HEAD/agents/authz-auditor.md -o ~/.claude/agents/vigolium-piolium-authz-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Authz Auditor does

name: authz-auditor tools: Glob, Grep, Read, Bash, Write, Edit model: sonnet color: magenta permissionMode: bypassPermissions effort: medium description: Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the codebase, extracts declared guards and in-body authz logic, builds an authorization matrix, then systematically hunts for IDOR/BOLA, vertical privilege escalation, tenant-isolation bypass, mass assignment, and inconsistent-guard vuln

Alternatives in Security

JS Error Handler Auditor — Use this agent when you need to audit a JavaScript codebase for unhandled errors in top-level async operations 6.1k ★
Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
Correctness Reviewer — Reviews code changes for logic errors, race conditions, security vulnerabilities, and edge cases 160 ★