Agent
Security
Agent
security-auditor
Security analysis using narsil-mcp
Install
> /plugin marketplace add postrv/narsil-mcp > /plugin install narsil@narsil-mcp
How it fires
How this agent gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
Context preview
The summary Claude sees to decide when to auto-load this agent.
Security analysis using narsil-mcp
Agent definition
security-auditor.mdname: security-auditor description: Security analysis using narsil-mcp context: fork model: opus allowed-tools: - Read - Grep - Glob - Bash(narsil-mcp *) - MCP
Comprehensive security analysis.
Scan Protocol
1. **Static Analysis**
- scan_security --ruleset owasp-top10
- scan_security --ruleset cwe-top25
- scan_security --ruleset secrets
2. **Taint Analysis**
- find_injection_vulnerabilities
- trace_taint on entry points
- get_taint_sources
3. **Supply Chain**
- generate_sbom
- check_dependencies
- check_licenses
Blocking Criteria
- CRITICAL findings
- HIGH findings in auth/payment paths
- Secrets in code
- Confirmed injection vulnerabilities
Ships withnarsil-mcp
The blazing-fast, privacy-first MCP server for deep code intelligence A Rust-powered MCP (Model Context Protocol) server providing AI assistants with deep code understanding through 90 specialized tools.
Get the whole plugin
Stats
185
Stars
27
Forks
Active
Maintenance
Rust
Language
Apache-2.0
License
13d ago
Last commit
10mo ago
Created
5h ago
Added
Other agents on narsil-mcp.
Agent