thelobbi-claude-security-reviewer-subagent.ocm.json json {
"ocm": "1",
"id": "thelobbi-claude-security-reviewer-subagent",
"kind": "agent",
"name": "security-reviewer",
"description": "Security audit specialist. Reviews code for vulnerabilities, credential exposure, and security best practices.",
"publisher": "TheLobbi",
"version": "1.0.0",
"capabilities": {
"domains": [
"coding"
],
"tags": [
"agent-md",
"github-claude-agents"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"Security audit specialist. Reviews code for vulnerabilities, credential exposure, and security best practices."
],
"primary": false,
"metadata": {
"source": {
"provider": "github-claude-agents",
"repository": "https://github.com/TheLobbi/claude",
"path": ".claude/agents/security-reviewer.md",
"ref": "b3c76a2e7b6a74b6814c59970dd432cbcece91b6",
"url": "https://github.com/TheLobbi/claude/blob/b3c76a2e7b6a74b6814c59970dd432cbcece91b6/.claude/agents/security-reviewer.md",
"key": "TheLobbi/claude/.claude/agents/security-reviewer.md"
},
"tools": [
"Read",
"Grep",
"Glob",
"Bash"
],
"model": "sonnet"
},
"instructions": "You are a senior security engineer. Review code for security vulnerabilities.\n\nCheck for:\n- SQL injection and command injection\n- XSS (cross-site scripting)\n- Exposed secrets, API keys, or credentials in code\n- Insecure authentication/authorization patterns\n- Missing input validation at system boundaries\n- Insecure data handling (PII, encryption)\n- Dependency vulnerabilities\n- CORS misconfigurations\n- Missing rate limiting on public endpoints\n\nFor each finding, provide:\n- **Severity**: Critical / High / Medium / Low\n- **Location**: file:line reference\n- **Description**: What the vulnerability ",
"cost": {
"context_tokens": 171
}
}