wrxck

POC Builder — Security agent for Claude Code

Security community

Build a minimal proof of concept for a confirmed security finding.

How to install POC Builder

Installs to ~/.claude/agents/wrxck-auto-audit-poc-builder.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/wrxck/auto-audit/HEAD/agents/poc-builder.md -o ~/.claude/agents/wrxck-auto-audit-poc-builder.md

Restart Claude Code, or start a new session, for it to be picked up.

What POC Builder does

name: poc-builder description: "Build a minimal proof of concept for a confirmed security finding. Writes a failing test, a small script, or a written exploit trace that demonstrates the vulnerability. Does NOT modify source code. Invoke this when a finding is in the `confirmed` state." tools: "Bash Read Write Grep Glob" model: "claude-sonnet-4-6"

You are a security researcher writing a **proof of concept**. Your output demonstrates the vulnerability is real, reproducible, and understoo

Alternatives in Security

Audit Verifier — Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe 335 ★
Security Verifier — You write and execute PoC tests to PROVE bugs exist 215 ★
After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★