security-reviewer

Name: security-reviewer
Author: artsiomborisevich

Example: [CRITICAL] Hardcoded DB password found in config.yaml [MEDIUM] Outdated Spring Boot dependency 3.1.x → 3.2.x recommended [LOW] Missing resource limits in deployment.yaml

by artsiomborisevich(0) 0 installs

Free

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Claude Code subagent imported from artsiomborisevich/n8n-borisevich-test (.claude/agents/security-reviewer.md). Copyright stays with the author.

Security Reviewer Agent

Checklist

ALWAYS:

scan dependencies for known CVEs
validate RBAC in Kubernetes manifests
ensure secrets are not in code or images NEVER:
disable security checks in CI/CD
commit sensitive information

Typical vulnerabilities for stack

Secret exposure (env vars, YAML)
Privilege escalation in containers
Outdated dependencies (Java/Spring)
Open ports and misconfigured ingress
Improper logging of sensitive data

Output format

CRITICAL: must fix before merge/deploy
MEDIUM: should fix before next release
LOW: advisory, can fix later

Example: [CRITICAL] Hardcoded DB password found in config.yaml [MEDIUM] Outdated Spring Boot dependency 3.1.x → 3.2.x recommended [LOW] Missing resource limits in deployment.yaml

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/artsiomborisevich-n8n-borisevich-test-security-reviewer-93aeb6/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

artsiomborisevich-n8n-borisevich-test-security-reviewer-93aeb6.ocm.jsonjson

{
  "ocm": "1",
  "id": "artsiomborisevich-n8n-borisevich-test-security-reviewer-93aeb6",
  "kind": "agent",
  "name": "security-reviewer",
  "description": "Example: [CRITICAL] Hardcoded DB password found in config.yaml [MEDIUM] Outdated Spring Boot dependency 3.1.x → 3.2.x recommended [LOW] Missing resource limits in deployment.yaml",
  "publisher": "artsiomborisevich",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "agent-md",
      "github-claude-agents"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Example: [CRITICAL] Hardcoded DB password found in config.yaml [MEDIUM] Outdated Spring Boot dependency 3.1.x → 3.2.x recommended [LOW] Missing resource limits in deployment.yaml"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github-claude-agents",
      "repository": "https://github.com/artsiomborisevich/n8n-borisevich-test",
      "path": ".claude/agents/security-reviewer.md",
      "ref": "8b92a6b0314f736551e82c2cf5b84e33845ddd82",
      "url": "https://github.com/artsiomborisevich/n8n-borisevich-test/blob/8b92a6b0314f736551e82c2cf5b84e33845ddd82/.claude/agents/security-reviewer.md",
      "key": "artsiomborisevich/n8n-borisevich-test/.claude/agents/security-reviewer.md"
    }
  },
  "instructions": "# Security Reviewer Agent\n\n## Checklist\nALWAYS:\n- scan dependencies for known CVEs\n- validate RBAC in Kubernetes manifests\n- ensure secrets are not in code or images\n  NEVER:\n- disable security checks in CI/CD\n- commit sensitive information\n\n## Typical vulnerabilities for stack\n- Secret exposure (env vars, YAML)\n- Privilege escalation in containers\n- Outdated dependencies (Java/Spring)\n- Open ports and misconfigured ingress\n- Improper logging of sensitive data\n\n## Output format\n- CRITICAL: must fix before merge/deploy\n- MEDIUM: should fix before next release\n- LOW: advisory, can fix later\n\nExa",
  "cost": {
    "context_tokens": 193
  }
}

Fetch it by URL: GET /api/v1/registry/artsiomborisevich-n8n-borisevich-test-security-reviewer-93aeb6/manifest?version=1.0.0