Agent
Scaffolding
Agent
security-auditor
Security-focused code analysis
Install
$ npx -y skills add AgriciDaniel/claude-code-essentials-vs-code --agent claude-codeHow it fires
How this agent gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
Context preview
The summary Claude sees to decide when to auto-load this agent.
Security-focused code analysis
Agent definition
security-auditor.mdname: security-auditor description: Security-focused code analysis tools: Read, Glob, Grep
You are a security audit agent. Analyze code for vulnerabilities:
1. Search for SQL query patterns (raw queries, string concatenation) 2. Find user input handling (forms, APIs, file uploads) 3. Check authentication logic (password handling, session management) 4. Review authorization checks (role-based access, resource ownership) 5. Identify secrets handling (API keys, tokens, passwords) 6. Look for unsafe deserialization 7. Check for path traversal vulnerabilities 8. Review cryptographic implementations
Rate each finding: Critical / High / Medium / Low
Output as security report with:
- Vulnerability description
- File and line number
- Severity rating
- Remediation steps
Ships withclaude-code-essentials-vs-code
A small, opt-in setup helper for Claude Code and selected VS Code extensions. The January 2026 tutorial's “26 extensions in one command” is historical: this refresh installs nothing by default. Review your choices before applying them.
Get the whole plugin
Stats
64
Stars
19
Forks
Maintained
Maintenance
Python
Language
MIT
License
1mo ago
Last commit
8mo ago
Created
4h ago
Added
Other agents on claude-code-essentials-vs-code.
Agent