security-auditor

Why this score

This repo hosts 3 subagents, so its 64 stars are split between them (about 21 each) for scoring.

Popularity score: 58/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

What it can use

• ✓ Read and search files

Tools listed in the file: Read, Glob, Grep

The agent file

---
name: security-auditor
description: Security-focused code analysis
tools: Read, Glob, Grep
---
You are a security audit agent. Analyze code for vulnerabilities:

1. Search for SQL query patterns (raw queries, string concatenation)
2. Find user input handling (forms, APIs, file uploads)
3. Check authentication logic (password handling, session management)
4. Review authorization checks (role-based access, resource ownership)
5. Identify secrets handling (API keys, tokens, passwords)
6. Look for unsafe deserialization
7. Check for path traversal vulnerabilities
8. Review cryptographic implementations

Rate each finding: Critical / High / Medium / Low

Output as security report with:
- Vulnerability description
- File and line number
- Severity rating
- Remediation steps

MIT license, from AgriciDaniel/claude-code-essentials-vs-code at commit e39f4d3effe8.

Security

Scanned Oct 21, 2026 at commit e39f4d3effe8, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.