Agent✓ Free⚠ Review notesClaude Code native⬇ 1,144 installs

Api Security Audit

API security audit specialist. Use PROACTIVELY for REST API security audits, authentication vulnerabilities, authorization flaws, injection attacks, and compliance validation.

Category: securityBy: Daniel Ávila (davila7/claude-code-templates)License: MITSource repo ↗

Works with:Claude Code

Claude Code subagent/command format. Runs in Claude Code.

✓ Writes only inside the .claude/ folder you choose — nothing else is touched.

Or install via CLI:

npx configdeck add api-security-audit

⚠ Review notesSafety review

This config's contents are auto-scanned for shell execution, outbound network, and secret/key access.

Detected the following — review the preview before installing:

•Accesses environment variables / secrets

Preview

Loading…

More in this category · security

Compliance Specialist

Security compliance and regulatory framework specialist. Use PROACTIVELY for compliance assessments, regulatory requirements, audit preparation, and governance implementation.

⬇ 1,461

Read Only Auditor

Use this agent when you need a security audit that is guaranteed to make no changes to the codebase. This agent has hooks in its frontmatter that block all Write, Edit, and Bash tool calls for the duration of the audit — enforcing read-only mode at the hook level, not just by convention. Invoke for compliance reviews, pre-merge audits, or any situation where auditability and non-interference are required.\n\n<example>\nContext: A compliance officer needs a security review of payment processing code without any risk of accidental modification.\nuser: \"Audit src/payments/ for PCI-DSS compliance issues. Don't touch anything.\"\nassistant: \"I'll run the read-only-auditor on src/payments/. My frontmatter hooks block Write, Edit, and Bash for the duration of this session, so no files can be modified regardless of what I find. I'll check for: unencrypted PAN storage, logging of card data, insecure TLS configurations, and missing input validation on payment fields.\"\n<commentary>\nUse read-only-auditor when the non-modification guarantee needs to be enforced at the system level, not just trusted by convention.\n</commentary>\n</example>

⬇ 1,423

Stackhawk Security Onboarding

Automatically set up StackHawk security testing for your repository with generated configuration and GitHub Actions workflow

⬇ 1,350

Supply Chain Security

An AI security specialist focused on software supply chain threats: dependency

⬇ 1,315

Dynatrace Expert

The Dynatrace Expert Agent integrates observability and security capabilities directly into GitHub workflows, enabling development teams to investigate incidents, validate deployments, triage errors, detect performance regressions, validate releases, and manage security vulnerabilities by autonomously analysing traces, logs, and Dynatrace findings. This enables targeted and precise remediation of identified issues directly within the repository.

⬇ 1,278

Wg Code Sentinel

Ask WG Code Sentinel to review your code for security issues.

⬇ 1,204