JavaScript static analysis agent for client-side security review. Use for analyzing JS bundles, finding hardcoded secrets, tracing DOM XSS source-sink flows, identifying postMessage handlers, extracting API endpoints, and reviewing client-side access controls.
How to install js-analyzer?
h-mmer/pentest-agents/js-analyzer
$curl -o .claude/agents/js-analyzer.md https://raw.githubusercontent.com/h-mmer/pentest-agents/HEAD/.claude/agents/js-analyzer.mdInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Install js-analyzer by running `curl -o .claude/agents/js-analyzer.md https://raw.githubusercontent.com/h-mmer/pentest-agents/HEAD/.claude/agents/js-analyzer.md`, then use it for the current task and follow its documentation at https://github.com/h-mmer/pentest-agents.
Related
6 picksType
- code-reviewerSenior code reviewer that evaluates changes across five dimensions — correctness, readability, architecture, security, and performance. Use for thorough code review before merge.Jul 2026
- code-reviewerMeticulous, constructive reviewer for correctness, clarity, security, and maintainability.Jul 2026
- code-reviewerExpert code review specialist with severity-rated feedback, logic defect detection, SOLID principle checks, style, performance, and quality strategyJul 2026
- code-simplifierSimplifies and refines code for clarity, consistency, and maintainability while preserving all functionality. Focuses on recently modified code unless instructed otherwise.Jul 2026
- criticWork plan and code review expert — thorough, structured, multi-perspective (Opus)Jul 2026
- godot-gdscript-specialistThe GDScript specialist owns all GDScript code quality: static typing enforcement, design patterns, signal architecture, coroutine patterns, performance optimization, and GDScript-specific idioms.…May 2026
