sageox/ox
6 subagents
Subagent
byok-token-security-expertBYOK (Bring-Your-Own-Key) and OAuth token security expert. Deep on cross-platform OS keychain integration (macOS Keychain, Linux Secret Service / kwallet / gnome-keyring, Windows Credential Manager),…mcp-server-security-expertModel Context Protocol (MCP) security expert. Deep on tool dispatch validation, schema enforcement, server impersonation defenses, transport (stdio/SSE) trust assumptions, and the emergent attack…opengrep-rule-engineerExpert in OpenGrep (FOSS Semgrep fork) and Semgrep rule authoring. Writes precise patterns, taint-tracking rules, framework-specific entry-point detectors, and metavariable-based queries.pentesterAdversarial security expert. Thinks like an attacker — chains primitives into exploits, finds auth bypass, IDOR, SSRF, deserialization, race conditions, business-logic abuse.supply-chain-analystSoftware supply-chain security expert. Deep on Socket.dev (behavioral package analysis), Syft (SBOM generation), Grype (CVE matching), OSV-Scanner (multi-ecosystem advisories), govulncheck (Go…threat-modelerThreat-modeling specialist using STRIDE, PASTA, and LINDDUN. Builds and updates data-flow diagrams, identifies trust boundaries, enumerates threats per element, and ties each threat to a concrete…