Agent

Security Auditor

Reviews code for OWASP Top 10 patterns and dependency CVEs.

安裝

manual
cp security-auditor.md ~/.claude/agents/

把這段加入 Claude Code MCP 設定,或直接透過 CLI 執行。

介紹

Looks for SQL injection, XSS, hardcoded secrets, weak crypto, and dangerous deserialization. Will flag missing rate-limits on auth endpoints.

常見使用情境

  • Pre-launch security review
  • CVE scan after dependency bump
  • Audit auth flow

標籤

securityauditowasp