Security Subagents

383 security subagents for Claude Code and AI agents, ranked by real installs from npm, PyPI and skills.sh.

#Type

1security-auditorSecurity engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.SubagentsJul 2026—80k
2security-reviewerSecurity vulnerability detection specialist (OWASP Top 10, secrets, unsafe patterns)SubagentsJul 2026—38k
3security-engineerThe Security Engineer protects the game from cheating, exploits, and data breaches. They review code for vulnerabilities, design anti-cheat measures, secure save data and network communications, and…SubagentsMay 2026—23k
4securityAudits code for vulnerabilities at the framework's real trust boundaries — XAML/data-binding of untrusted content, the DevServer/RemoteControl network host, source generators reading project inputs,…SubagentsJul 2026—10.0k
5security-auditorSecurity-focused code auditor for Java/Netty applications. Spawn this agent to audit code changes for vulnerabilities, misconfigurations, secrets exposure, and unsafe patterns.SubagentsJul 2026—4.9k
6security-auditorSecurity auditor for DevSecOps, OWASP compliance, vulnerability assessment, and threat modelingSubagentsJul 2026—3.9k
7exploitability-validator-agentMulti-stage pipeline to validate vulnerability findings are real, reachable, and exploitableSubagentsJul 2026—3.4k
8offsec-specialistUse this agent when the user needs to perform offensive security operations, security testing, or vulnerability research tasks. This includes:\n\n<example>\nContext: User wants to test a web…SubagentsJul 2026—3.4k
9oss-evidence-verifier-agentVerify all collected evidence against original sourcesSubagentsJul 2026—3.4k
10oss-hypothesis-checker-agentValidate hypothesis claims against verified evidenceSubagentsJul 2026—3.4k
11oss-hypothesis-former-agentForm evidence-backed hypotheses for forensic investigationsSubagentsJul 2026—3.4k
12oss-investigator-gh-archive-agentQuery GH Archive via BigQuery for tamper-proof forensic evidenceSubagentsJul 2026—3.4k
13oss-investigator-github-agentQuery GitHub API for repository state, commits, and recovery of deleted commitsSubagentsJul 2026—3.4k
14oss-investigator-ioc-extractor-agentExtract IOCs from vendor security reports as forensic evidenceSubagentsJul 2026—3.4k
15oss-investigator-local-git-agentAnalyze cloned repositories for dangling commits and git forensicsSubagentsJul 2026—3.4k
16oss-investigator-wayback-agentRecover deleted GitHub content via Wayback MachineSubagentsJul 2026—3.4k
17oss-report-generator-agentGenerate final forensic report from confirmed hypothesis and evidenceSubagentsJul 2026—3.4k
18permission-analystAnalyze permission denial patterns and generate optimized alwaysAllow/alwaysDeny rules. Use when permission prompts slow down workflow.SubagentsJul 2026—2.7k
19_scope-guardTurn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections,…SubagentsJun 2026—2.0k
20ad-attackerDelegates to this agent when the user wants to perform Active Directory attacks, run BloodHound analysis, use Impacket tools, execute Kerberos attacks, perform AD enumeration with CrackMapExec or…SubagentsJun 2026—2.0k
21ai-reconDelegates to this agent when the user wants to map the AI attack surface of an authorized web application before validation — discovering AI/LLM API endpoints (including OpenAI-compatible APIs),…SubagentsJun 2026—2.0k
22api-securityDelegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation, OAuth/OIDC vulnerabilities, JWT attacks, API enumeration, or web service penetration…SubagentsJun 2026—2.0k
23attack-plannerDelegates to this agent when the user wants to correlate findings from multiple tools or agents, build multi-step attack chains, identify the optimal exploitation path through a network, prioritize…SubagentsJun 2026—2.0k
24bizlogic-hunterDelegates to this agent when the user wants to test for business logic flaws, find workflow bypass vulnerabilities, detect price manipulation or payment tampering, identify race conditions in…SubagentsJun 2026—2.0k
25bug-bountyDelegates to this agent when the user is working on bug bounty programs, submitting vulnerability reports to HackerOne or Bugcrowd, needs help with bug bounty methodology, wants to prioritize targets…SubagentsJun 2026—2.0k
26c2-operatorDelegates to this agent when the user asks about command-and-control framework operations, Sliver/Mythic/Havoc/Cobalt Strike configuration, listener and beacon tuning, malleable C2 profiles, sleep…SubagentsJun 2026—2.0k
27cloud-securityDelegates to this agent when the user asks about cloud security testing, AWS/Azure/GCP penetration testing, cloud misconfiguration analysis, IAM privilege escalation, container security, Kubernetes…SubagentsJun 2026—2.0k
28container-breakoutDelegates to this agent when the user asks about container escape, Docker breakout, Kubernetes pod escape, runc/containerd CVE exploitation, capability abuse, privileged container hunting, kubelet…SubagentsJun 2026—2.0k
29credential-testerDelegates to this agent when the user asks about password attacks, credential testing, hash cracking, brute force methodology, default credential checks, password spraying, or needs help with tools…SubagentsJun 2026—2.0k
30crypto-analyzerDelegates to this agent when the user wants to analyze cryptographic usage — weak algorithms or modes, key and IV/nonce management, TLS/certificate configuration, randomness quality, password…SubagentsJun 2026—2.0k
31ctf-solverDelegates to this agent when the user is working on CTF challenges, capture the flag competitions, HackTheBox machines, TryHackMe rooms, or needs help with CTF methodology including web exploitation,…SubagentsJun 2026—2.0k
32data-exfiltratorDelegates to this agent when the user wants to test exfiltration and DLP/egress controls during an authorized engagement — DNS tunneling, HTTPS/cloud-storage exfil, ICMP, protocol abuse, and staging…SubagentsJun 2026—2.0k
33detection-engineerDelegates to this agent when the user asks about detection rules, SIEM queries, threat hunting, indicator analysis, log analysis, blue team detection for specific attack techniques, or creating…SubagentsJun 2026—2.0k
34evasion-specialistDelegates to this agent when the user wants to test defensive evasion during an authorized red team or EDR-validation engagement — AV/EDR evasion, AMSI and ETW bypass, payload obfuscation, in-memory…SubagentsJun 2026—2.0k
35exploit-chainerDelegates to this agent when the user wants to automatically chain isolated vulnerabilities into multi-step attack paths, pivot through a system from a low-severity finding to full compromise,…SubagentsJun 2026—2.0k
36forensics-analystDelegates to this agent when the user asks about digital forensics, incident response, evidence acquisition, memory forensics, disk forensics, network forensics, timeline analysis, or chain of custodySubagentsJun 2026—2.0k
37iot-pentesterDelegates to this agent when the user wants authorized security testing of IoT/embedded devices — firmware extraction and analysis, hardware interfaces (UART/JTAG/SPI), radio protocols…SubagentsJun 2026—2.0k
38lateral-movementDelegates to this agent when the user wants post-foothold lateral-movement strategy on an authorized engagement — pass-the-hash/ticket, remote execution (PsExec/WMI/WinRM/DCOM/SSH), token…SubagentsJun 2026—2.0k
39network-attackerDelegates to this agent when the user wants layer-2/layer-3 offensive testing on an authorized internal network — LLMNR/NBT-NS/mDNS poisoning, ARP spoofing and MITM, NTLM relay, IPv6/mitm6 takeover,…SubagentsJun 2026—2.0k
40opsec-anonymizerDelegates to this agent when the user asks about operator-side identity hygiene, source IP separation, traffic anonymization for authorized red team work, Tor and proxy chains, burner infrastructure…SubagentsJun 2026—2.0k
41osint-collectorDelegates to this agent when the user asks about OSINT, reconnaissance, information gathering, target profiling, email harvesting, subdomain enumeration, social media recon, breach data, open source…SubagentsJun 2026—2.0k
42password-auditorDelegates to this agent when the user wants to audit password posture — policy review against NIST 800-63B, password-storage/hashing review, breach-exposure checks, and lockout-safe password-spray…SubagentsJun 2026—2.0k
43payload-crafterDelegates to this agent when the user asks about generating offensive payloads, building shellcode, working with msfvenom, packing or encoding payloads, building reverse shells, creating EDR-test…SubagentsJun 2026—2.0k
44persistence-plannerDelegates to this agent when the user wants to plan and document persistence during an authorized red team engagement — host persistence (Windows/Linux), Active Directory persistence (golden/silver…SubagentsJun 2026—2.0k
45phishing-operatorDelegates to this agent when the user asks about setting up phishing infrastructure, configuring Evilginx3 or GoPhish, adversary-in-the-middle credential capture, MFA token relay, domain lookalike…SubagentsJun 2026—2.0k
46poc-validatorDelegates to this agent when the user wants to validate a vulnerability finding with a safe Proof of Concept, eliminate false positives from scan results, automatically generate and execute PoC…SubagentsJun 2026—2.0k
47privesc-advisorDelegates to this agent when the user asks about privilege escalation techniques, local enumeration, Linux or Windows privilege escalation, container escape, or needs help escalating access on a…SubagentsJun 2026—2.0k
48recon-advisorDelegates to this agent when the user pastes scan output (Nmap, Nessus, Nikto, masscan, etc.), asks about reconnaissance techniques, needs help with enumeration, wants to analyze an attack surface,…SubagentsJun 2026—2.0k
49report-generatorDelegates to this agent when the user needs to write a penetration test report, compile findings into a document, create an executive summary, format technical findings, or produce any security…SubagentsJun 2026—2.0k
50risk-scorerDelegates to this agent when the user wants to score and prioritize findings — build CVSS 3.1/4.0 vectors, enrich with EPSS and CISA KEV, adjust for business context and exploitability, and produce a…SubagentsJun 2026—2.0k
51scada-attackerDelegates to this agent when the user wants authorized ICS/OT/SCADA security testing — Modbus/DNP3/S7comm/EtherNet-IP/OPC-UA protocol analysis, PLC/HMI/RTU enumeration, and Purdue-model attack-path…SubagentsJun 2026—2.0k
52social-engineerDelegates to this agent when the user asks about social engineering, phishing campaigns, pretexting, vishing, physical social engineering, security awareness testing, or human-factor security…SubagentsJun 2026—2.0k
53stig-analystDelegates to this agent when the user asks about STIG findings, security compliance, system hardening, GPO configurations, security baselines, or needs to document findings in STIG format including…SubagentsJun 2026—2.0k
54threat-modelerDelegates to this agent when the user asks about threat modeling, attack surface analysis, STRIDE, DREAD, attack trees, data flow diagrams, trust boundaries, or security architecture reviewSubagentsJun 2026—2.0k
55traffic-analyzerDelegates to this agent when the user wants offline analysis of captured network traffic — dissecting pcaps, extracting credentials and artifacts, reconstructing sessions, identifying protocols and…SubagentsJun 2026—2.0k
56vuln-scannerDelegates to this agent when the user wants to run vulnerability scans, identify CVEs in target systems, use tools like nuclei, nikto, or OpenVAS, parse vulnerability scan results, or prioritize…SubagentsJun 2026—2.0k
57web-hunterDelegates to this agent when the user wants to perform web application penetration testing, run directory brute forcing with ffuf or gobuster, test for SQL injection, discover hidden endpoints, fuzz…SubagentsJun 2026—2.0k
58wireless-pentesterDelegates to this agent when the user asks about wireless security testing, WiFi pentesting, WPA/WPA2/WPA3 attacks, Bluetooth security, wireless reconnaissance, rogue access points, evil twin…SubagentsJun 2026—2.0k
59security-reviewerUse for prompt-injection defense, untrusted content boundaries, browser/DOM/screen context, source capability boundaries, secret protection, and least-privilege reviews.SubagentsJul 2026—2.0k
60oauth-expertSpecialized in OAuth 2.0, OIDC, token exchange, and authentication flows for ToolHiveSubagentsJul 2026—2.0k
61security-advisorSecurity guidance for code reviews, architecture decisions, auth implementations, and threat modelingSubagentsJul 2026—2.0k
62security-reviewer安全漏洞检测与修复专家。在编写处理用户输入、身份认证、API 端点或敏感数据的代码后，应主动（PROACTIVELY）使用此智能体。它可以标记敏感信息（Secrets）、SSRF、注入（Injection）、不安全的加密以及 OWASP Top 10 漏洞。SubagentsMar 2026—1.8k
63security-auditorSecurity specialist for vulnerability detection, secure coding review, and security hardening. Use PROACTIVELY when handling authentication, authorization, encryption, secrets, credentials, OAuth,…SubagentsJul 2026—1.4k
64sv-security-reviewerSecurity + secrets + supply-chain reviewer for a SceneView change. No committed keys, safe deserialization, sane permission scopes, no untrusted-input footguns. Read-only; ERROR = blocks merge.SubagentsJul 2026—1.3k
65auth-explorerExplore and analyze authentication-related code. Use when investigating auth flows, session management, or security.SubagentsJul 2026—1.0k
66security-code-reviewerUse this agent when you need to review code for security vulnerabilities, input validation issues, or authentication/authorization flaws.SubagentsJul 2026—804
67policy-enforcerBlocking policy judge. Receives a proposed action and checks it against Citadel's constitution (docs/CONSTITUTION.md). Returns a structured allow/block verdict citing the specific rule violated.…SubagentsJul 2026—803
68security-reviewerOWASP Top 10 분석·시크릿 탐지·의존성 감사. severity × exploitability × blast radius 우선순위. Read-only 검토. Use proactively when 사용자 입력 처리, 인증/인가, API 엔드포인트, 민감 데이터를 다루는 코드 변경 시 — 특히 "보안 검토", "취약점", "auth 코드" 요청. 코드…SubagentsJul 2026—791
69auth-testerAuthentication and session management testing agent. Use for login bypass, session fixation, password reset flow abuse, MFA bypass, OAuth flaws, and privilege escalation testing. Provide the…SubagentsJun 2026—776
70business-logicBusiness Logic vulnerability specialist (H1 #28, CWE-840/841/639/362). Use for testing workflow bypasses, price manipulation, coupon abuse, MFA/2FA bypass, password-reset bypass, free-trial abuse,…SubagentsJun 2026—776
71chain-builderDeep exploit chain builder. Given bug A, recursively walks the chain graph — each confirmed link becomes the new A. No depth limit. Supports 2-link to 10+ link chains. Use when you have any finding…SubagentsJun 2026—776
72config-auditorSecurity header and server configuration auditor. Use for HTTP security header analysis, CSP evaluation, CORS policy review, TLS configuration assessment, cookie security, and server hardening…SubagentsJun 2026—776
73correlatorFinding correlation engine. Use AFTER multiple agents have reported findings to discover attack chains. Combines individual findings into higher-impact chains (e.g., open redirect + CORS + SSRF =…SubagentsJun 2026—776
74cors-hunterCORS Misconfiguration specialist (H1 #58). Use for testing cross-origin resource sharing policies, origin reflection, null origin bypass, and credential-bearing cross-origin requests.SubagentsJun 2026—776
75csrf-hunterCSRF specialist (H1 #57). Use for testing state-changing actions without proper token validation, SameSite cookie bypass, and CSRF in JSON/API endpoints.SubagentsJun 2026—776
76file-uploadFile Upload vulnerability specialist (H1 #39). Use for testing upload restrictions, content-type bypass, extension filtering, path traversal in filenames, and web shell upload scenarios.SubagentsJun 2026—776
77idor-hunterIDOR / BOLA specialist (H1 #55, OWASP API1:2023). Use for testing insecure direct object references and broken object level authorization across web apps, APIs, GraphQL endpoints, multi-tenant SaaS,…SubagentsJun 2026—776
78info-disclosureInformation Disclosure specialist (H1 #18, CWE-200/209/215/538/668/798). Use for finding exposed sensitive data: stack traces, debug endpoints, config files, environment variables, API keys,…SubagentsJun 2026—776
79nuclei-writerCustom nuclei template builder. Use when you've found a pattern that should be checked across multiple targets or when existing templates miss a specific vulnerability. Provide the vulnerability…SubagentsJun 2026—776
80oauth-hunterOAuth 2.0 / 2.1, OpenID Connect (OIDC), SAML SSO, and JWT specialist. Dispatcher passes subtype — 'oauth', 'oidc', 'saml', or 'jwt' — in the task; falls back to inference.SubagentsJun 2026—776
81open-redirectOpen Redirect specialist (H1 #38). Use for testing URL redirect parameters, login/logout flows, OAuth callbacks, and any endpoint that redirects based on user input.SubagentsJun 2026—776
82poc-builderBug bounty PoC and report builder. Use after confirming a vulnerability to create minimal reproduction steps, self-contained HTML demonstration pages, curl-based reproduction scripts, and…SubagentsJun 2026—776
83privilege-escalationPrivilege Escalation specialist (H1 #26). Use for testing vertical and horizontal privilege escalation, role manipulation, admin endpoint access, and permission boundary violations.SubagentsJun 2026—776
84quality-checkReport quality scorer. Use BEFORE submitting any report to validate completeness, clarity, title strength, CVSS accuracy, PoC quality, and overall report grade. Provide the draft report path or…SubagentsJun 2026—776
85race-conditionRace Condition specialist (H1 #29). Use for testing TOCTOU flaws, double-spend, parallel request abuse on balance operations, coupon redemption, and any non-idempotent state changes.SubagentsJun 2026—776
86rce-hunterRemote Code Execution specialist (H1 #70). Use for testing command injection, template injection (SSTI), deserialization, expression language injection, and any vector that achieves server-side code…SubagentsJun 2026—776
87reconReconnaissance agent for target enumeration. Use for subdomain discovery, port scanning, service fingerprinting, tech stack identification, and OSINT gathering.SubagentsJun 2026—776
88recon-rankerAttack surface ranker. Takes recon output + brain data, produces P1/P2/Kill prioritized attack plan with concrete curl commands for each P1 target. Use after recon to decide what to test first.SubagentsJun 2026—776
89report-writerSecurity report generation agent. Use for compiling findings into formal penetration test reports, executive summaries, technical write-ups, and bug bounty submissions. Provide the findings directory…SubagentsJun 2026—776
90sast-devils-advocateAdversarial validator for SAST findings. Your ONLY job is to DISPROVE the candidate. Find every reason it's not exploitable. If you can't disprove it, it survives. Use via /sast command.SubagentsJun 2026—776
91sast-exploit-builderBuilds working exploits from confirmed SAST findings. Takes a confirmed crash, develops it into a full exploit. Tier 1 (DoS) → Tier 5 (code execution). Use via /sast command after PoC confirmation.SubagentsJun 2026—776
92sast-file-rankerSource file attack surface ranker. Reads a repository, scores every source file 1-5 by exploitability. Outputs ranked JSON for per-file hunting. Use via /sast command.SubagentsJun 2026—776
93sast-hunterFocused PoC builder for SAST candidates. Receives a SPECIFIC candidate vulnerability that survived adversarial validation. Writes a PoC, compiles, runs with ASan, confirms or rejects. Use via /sast…SubagentsJun 2026—776
94scope-checkTarget scope validation agent. Use BEFORE any active testing to verify targets are in scope. Provide the target and the program name or scope file. Checks against .scope.txt, scope.yaml, and fetches…SubagentsJun 2026—776
95sqli-hunterSQL Injection specialist (H1 #67). Use for error-based, blind boolean, blind time-based, UNION-based, and out-of-band SQLi testing. Provide target endpoints with injectable parameters.SubagentsJun 2026—776
96ssrf-hunterSSRF vulnerability hunting specialist. Use for testing URL-accepting parameters, webhook endpoints, file import features, and any server-side request functionality. Provide target endpoints with URL…SubagentsJun 2026—776
97ssti-hunterServer-Side Template Injection specialist. Covers Jinja2 (H1 #74), Twig, Velocity, FreeMarker, ERB, Handlebars, Thymeleaf. Use for any rule-engine, comment/message rendering, PR automation, admin…SubagentsJun 2026—776
98subdomain-takeoverSubdomain Takeover specialist (H1 #145). Use for finding dangling DNS records pointing to unclaimed cloud resources, expired services, or deprovisioned infrastructure.SubagentsJun 2026—776
99validatorFinding validator. Runs 7-Question Gate + 4-gate checklist. Kills weak/theoretical findings FAST before any report writing. Output: PASS, KILL, DOWNGRADE, or CHAIN REQUIRED.SubagentsJun 2026—776
100vuln-scannerAutomated vulnerability scanning agent. Use for running nuclei templates, nikto scans, SSL/TLS analysis, header checks, and known CVE detection against targets.SubagentsJun 2026—776

More subagents categories

Code Review & Refactor809 Backend & APIs542 Testing & QA507 Product & Project Management497 Agent Meta & Communication463 Documentation & Knowledge418 DevOps & CI/CD386 AI Agents & MCP320 Debugging290 Research281 All Subagents →