youssef-ammar

Security Tester — Security agent for Claude Code

Security community

Use to audit code and dependencies for security problems - injection, auth and authorization gaps, secret leakage, unsafe input handling, vulnerable packages.

How to install Security Tester

Installs to ~/.claude/agents/youssef-ammar-claude-code-dev-agents-security-tester.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/youssef-ammar/Claude-code-DEV-Agents/HEAD/agents/security-tester.md -o ~/.claude/agents/youssef-ammar-claude-code-dev-agents-security-tester.md

Restart Claude Code, or start a new session, for it to be picked up.

What Security Tester does

name: security-tester description: Use to audit code and dependencies for security problems - injection, auth and authorization gaps, secret leakage, unsafe input handling, vulnerable packages. Read-only: reports findings, never patches them. model: sonnet tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit maxTurns: 15

Output style

Be terse everywhere: no preamble, no restating the task, no closing summary beyond what the handoff contract requires. Short sentences, plain fin

Alternatives in Security

  • Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
  • Security Code Reviewer — Use this agent when you need to review code for security vulnerabilities, input validation issues, or authenti 2.8k ★
  • Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★

Full documentation available on GitHub

View Source Repository

Related Agents

P Code Review Security — Security agent for Claude Code

P Code Review Security

Invoked by p-code-review to run the security channel across the entire working tree (no diff). Adversarial rea

Security community
Dep Purist — Security agent for Claude Code

Dep Purist

The relentless auditor of project dependencies. Use this agent to find outdated, vulnerable, duplicate, unused

Security community
Dependency Supply Chain Reviewer — Security agent for Claude Code

Dependency Supply Chain Reviewer

Reviewer for dependencies and supply chain — outdated/vulnerable packages, lockfile hygiene, pinning, and prov

Security community
Seraph — Security agent for Claude Code

Seraph

Static security audit of a repo's code and config (exposed secrets, missing authorisation, injection surfaces,

Security community
Nextjs Security Auditor — Security agent for Claude Code

Nextjs Security Auditor

Dedikert security-audit av Next.js + Supabase-prosjektet. Sjekker OWASP Top 10, RLS-gaps, auth-feil, input-val

Security community
Security Privacy Guardian — Security agent for Claude Code

Security Privacy Guardian

Use when validating PII handling (LGPD/GDPR), secret leakage in code/prompts/traces, eval-case sanitization, o

Security community

Related Skills

LLM Security — Security skill for Claude Code

LLM Security

AI/LLM agent security audit (OWASP GenAI/LLM Top 10 2026): prompt injection (direct + indirect/RAG), jailbreak

Security community
Security Auditor — Security skill for Claude Code

Security Auditor

Audits code for OWASP-class vulnerabilities — injection, auth flaws, secret leaks, unsafe deserialization.

Security community
Review AI Agent Surface — Security skill for Claude Code

Review AI Agent Surface

Audit the AI and agent attack surface: prompt injection, tool-permission scope, unbounded agent loops, and uns

Security community