Host Reviewer — Security agent for Claude Code
Use this agent to audit an mcp-use server against one host's checklist (ChatGPT or Archestra Route A) and return findings in the plugin's finding schema.
How to install Host Reviewer
Installs to ~/.claude/agents/yigitkonur-plugin-mcp-use-host-reviewer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/yigitkonur/plugin-mcp-use/HEAD/agents/host-reviewer.md -o ~/.claude/agents/yigitkonur-plugin-mcp-use-host-reviewer.md Restart Claude Code, or start a new session, for it to be picked up.
What Host Reviewer does
name: host-reviewer description: Use this agent to audit an mcp-use server against one host's checklist (ChatGPT or Archestra Route A) and return findings in the plugin's finding schema. It runs the static scan and the live probe, reads the flagged code, judges the manual checklist items, and never edits files. Used by /mcp-use:host. Example - "audit this project for ChatGPT with the dev server at http://localhost:3000/mcp". tools: Read, Grep, Glob, Bash model: sonnet skills:
- host-chatgp
Alternatives in Security
- Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
- JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
- Authz Auditor — Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the c 125 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Hostwarden Host Probe
Probe one managed host for the fleet audit and return a
React Security
Frontend security reviewer persona for React apps. Use to review XSS risks, secret exposure in client bundles,
Ferrox A11y Auditor
Post-change WCAG 2.1 AA audit of implemented frontend surfaces. Static rules with file:line evidence plus an o
Ehs AI Safety
AI, agent and chatbot security specialist for the Ethical Hacker Squad. Reviews the instruction/data boundary,
Install Reviewer
Security review BEFORE anything is installed or connected — a package, app, MCP server, plugin, skill, extensi
Laya Vetter
Security-vets a candidate plugin, skill or MCP server repo before installation (hooks, install scripts, creden
Related Skills
Code Audit
Adversarial code review tree. Wraps /cc-tree:tree with the code-audit preset preselected — finds security / pe
Exploit Confirm
Prove a SUSPECTED finding with one targeted, SOC-stealth, operator-supervised confirmation probe (confirm_ too
AgentProbe
Session-history collectors for AI coding agents. One probe per tool — Claude Code, Antigravity, Gemini, Copilo