security-auditor
Security auditor: vulnerability scanning, dependency audits, OWASP Top 10 compliance, secrets detection, remediation.
An agent is a specialist Claude hands a whole job to, with its own tools and its own context.
7,710 agents across 587 plugins.
Security auditor: vulnerability scanning, dependency audits, OWASP Top 10 compliance, secrets detection, remediation.
Security layer auditor who verifies defense-in-depth implementation across 8 security layers, from edge to storage, ensuring comprehensive protection.
Your final output MUST include a `status` field with one of these values:
Audit a research project for question framing, methodology fit, source coverage, and synthesis integrity. Trigger before each synthesize or review wave.
Review a business strategy or plan artefact for feasibility, downside math, risk surface, and metric realism. Trigger per artefact pre-decision.
Use when generating a ROADMAP.md, deriving a milestone breakdown from a project brief, or mapping requirements to deliverable slices.
Use this agent when the user wants to "optimize queue performance", "reduce queue costs", "improve throughput", "tune batch settings", "scale queue…
Use this agent when the user asks to "set up R2", "create R2 bucket", "configure R2 binding", "add R2 to my project", or needs complete R2 setup automation.…
Use this agent when the user wants to "migrate from S3", "move to R2", "switch from AWS S3", "migrate AWS buckets", or needs S3-to-R2 migration planning.…
Analyzes codebase for existing patterns and produces PATTERNS.md mapping new files to closest analogs. Read-only codebase analysis spawned by /gsd-plan-phase…
Researches how to implement a phase before planning. Produces RESEARCH.md consumed by gsd-planner. Spawned by /gsd-plan-phase orchestrator.
Verifies plans will achieve phase goal before execution. Goal-backward analysis of plan quality. Spawned by /gsd-plan-phase orchestrator.
Use this agent when an MSP account manager, service manager, or operations lead needs to track and manage contract renewals in Autotask PSA — surfacing…
Use this agent when an MSP sales coordinator or account manager needs to track the status of pending proposals and contracts in PandaDoc. Trigger for: pending…
Use this agent when an MSP needs to know what has changed in a client's compliance posture since the last known-good baseline, prioritized by how much each…
This agent should be used when the arn-spark-report skill needs diagnostic investigation of an Arness Spark workflow issue. Analyzes Spark configuration,…
This agent should be used when the arn-spark-stress-premortem skill needs to investigate hypothetical product failure using Gary Klein's pre-mortem…
This agent should be used when the arn-spark-discover skill needs competitive landscape research to identify alternatives in a product's problem space, or when…
Persistent agent that continuously monitors Tier 1 (Strategic) and Tier 4 (Bottleneck) vendors for financial distress, operational decline, compliance lapses,…
Persistent agent that monitors the vendor portfolio weekly. Alerts when contracts approach renewal, SLA thresholds are breached, vendor spend exceeds approved…
Activate for: delegation tracking, overdue items, outstanding work, what am I waiting for, delegation follow-up, check on delegated work, missed deadline,…
Generates comprehensive Docker Compose configurations for development, staging, and production environments with proper networking, volumes, and service…
Specialist in designing media content management systems for video, audio, and digital assets.
Generates ASP.NET Core API controllers following Clean Architecture patterns
Use when: analyzing or generating sitemap.xml, sitemap-news.xml, sitemap-image.xml, sitemap-video.xml, or robots.txt. Do NOT use for: redirect analysis (use…
Use when: auditing robots.txt, sitemap.xml, Core Web Vitals (LCP/INP/CLS), mobile-first indexing, crawlability, indexability, redirects chains. Do NOT use for:…
Use when: components.json detected, @radix-ui/* or @base-ui/* in deps, configuring shadcn registry, theming/tokens, Radix→Base UI migration. Do NOT use for:…
Expert in modern CSS including CSS Grid, Flexbox, custom properties, container queries, CSS layers, native nesting, modern color spaces, and advanced styling…
Use this agent when you need to convert design mockups, wireframes, or visual concepts into detailed technical specifications and implementation guides for…
Expert in HTML structure, semantics, and best practices for building clean, accessible, and optimized web pages.
Good-faith evidence enumerator for Analysis of Competing Hypotheses, parameterized by an evidence class (direct-observational, documentary-historical,…
Good-faith hypothesis generator for Analysis of Competing Hypotheses, parameterized by a hypothesis-generation angle (leading, alternative, adversarial, null,…
Argues in good faith for an assigned position in adversarial proceedings. Used by /think-deliberate (arguing for one option among many) and /think-scrutinize…
Create, update, or review Azure IaC in Terraform using Azure Verified Modules (AVM).
Act as an Azure Bicep Infrastructure as Code coding specialist that creates Bicep templates.
Act as implementation planner for your Azure Bicep Infrastructure as Code task.
Manages configuration files and environment setup
Data pipelines, ETL processes, and data architecture
Charts, graphs, and data visualization components
- [WorkspaceIsolation] 워크스페이스 간 의존성을 명시적으로 관리한다 - [SharedCode] 공유 코드 변경 시 영향 받는 모든 워크스페이스를 확인한다 - [BuildScope] 변경된 패키지와 의존 패키지만 빌드한다
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic