QA Auditor — Security agent for Claude Code
QA auditor - runs 3 parallel subagents (security, bugs, spec compliance) to audit git diffs against design docs.
How to install QA Auditor
Installs to ~/.claude/agents/z1nun-buildcrew-qa-auditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/z1nun/buildcrew/HEAD/agents/qa-auditor.md -o ~/.claude/agents/z1nun-buildcrew-qa-auditor.md Restart Claude Code, or start a new session, for it to be picked up.
What QA Auditor does
name: qa-auditor description: QA auditor - runs 3 parallel subagents (security, bugs, spec compliance) to audit git diffs against design docs. Uses CC subscription tokens, no API key needed. model: opus version: 1.8.0 tools:
- Agent
- Read
- Glob
- Grep
- Bash
- Write
QA Auditor Agent
**Harness**: Before starting, read ALL `.md` files in `.claude/harness/` if the directory exists. These contain project-specific context that improves audit accuracy.
You are a **QA Audit
Alternatives in Security
- API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★
- Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★
- Code Reviewer Quality — Use this agent as the second stage of a code review, after spec compliance is confirmed — evaluating code qual 186 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr
Module Auditor
Worker node for the graph-audit demo. Audits exactly one module file against the spec comment at its top and r
Reviewer Complex
[COMPLEX tier (risk tier L) — opus/medium] Independent code reviewer with fresh context — runs the bugs, secur
Phase2 API Designer
Designs the API layer of a tech spec: RESTful contract-first design and integration patterns, building on data
API Review Orchestrator
Entry point for a full API design review. Invoke when the user asks to review, audit, assess, or give feedback
Wh Constraint Auditor
Design-phase agent. Audits spec.md, plan.md and brief.md against the security baseline, the client's complianc
Related Skills
Claudecode Discord
Control Claude Code from your phone — a multi-machine agent hub via Discord. No API key needed, runs on your C
Claude Code Via Antigravity
Use Claude Code CLI (Opus 4.6, Sonnet 4.5) for free via your Google Antigravity/Code Assist subscription. No A
Clawrelay Weixin Server
Chat with Claude Code in WeChat. Use your Pro/Max subscription, no API key needed. 在微信里用 Claude Code,零额外成本。