Analyzes validation gaps in data flows. Takes traced flows and identifies where checks are missing, insufficient, or bypassable. The 'interaction reasoning' step — finds bugs that exist in the gaps between individually correct-looking code. MUST run on Opus.
How to install sast-gap-analyzer?
h-mmer/pentest-agents/sast-gap-analyzer
$curl -o .claude/agents/sast-gap-analyzer.md https://raw.githubusercontent.com/h-mmer/pentest-agents/HEAD/.claude/agents/sast-gap-analyzer.mdInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Install sast-gap-analyzer by running `curl -o .claude/agents/sast-gap-analyzer.md https://raw.githubusercontent.com/h-mmer/pentest-agents/HEAD/.claude/agents/sast-gap-analyzer.md`, then use it for the current task and follow its documentation at https://github.com/h-mmer/pentest-agents.
Related
6 picksType
- debuggerRoot-cause analysis, regression isolation, stack trace analysis, build/compilation error resolutionJul 2026
- exploreCodebase search specialist for finding files and code patternsJul 2026
- tracerEvidence-driven causal tracing with competing hypotheses, evidence for/against, uncertainty tracking, and next-probe recommendationsJul 2026
- performance-analystThe Performance Analyst profiles game performance, identifies bottlenecks, recommends optimizations, and tracks performance metrics over time. Use this agent for performance profiling, memory…May 2026
- debuggerUse this agent when encountering errors, test failures, unexpected behavior, or any issues that require root cause analysis. The agent should be invoked proactively whenever debugging is needed.Jul 2026
- explorerRead-only code exploration sub-agent. Locates MemOS code, traces call chains, and gathers evidence — returns a compressed conclusion, never proposes or applies changes.Jul 2026
