安全漏洞检测与修复专家。在编写处理用户输入、身份认证、API 端点或敏感数据的代码后，应主动（PROACTIVELY）使用此智能体。它可以标记敏感信息（Secrets）、SSRF、注入（Injection）、不安全的加密以及 OWASP Top 10 漏洞。
How to install security-reviewer?
xu-xiang/everything-claude-code-zh/security-reviewer
$curl -o .claude/agents/security-reviewer.md https://raw.githubusercontent.com/xu-xiang/everything-claude-code-zh/HEAD/agents/security-reviewer.mdInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Install security-reviewer by running `curl -o .claude/agents/security-reviewer.md https://raw.githubusercontent.com/xu-xiang/everything-claude-code-zh/HEAD/agents/security-reviewer.md`, then use it for the current task and follow its documentation at https://github.com/xu-xiang/everything-claude-code-zh.
Related
6 picksType
- security-auditorSecurity engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.Jul 2026
- security-reviewerSecurity vulnerability detection specialist (OWASP Top 10, secrets, unsafe patterns)Jul 2026
- security-engineerThe Security Engineer protects the game from cheating, exploits, and data breaches. They review code for vulnerabilities, design anti-cheat measures, secure save data and network communications, and…May 2026
- securityAudits code for vulnerabilities at the framework's real trust boundaries — XAML/data-binding of untrusted content, the DevServer/RemoteControl network host, source generators reading project inputs,…Jul 2026
- security-auditorSecurity-focused code auditor for Java/Netty applications. Spawn this agent to audit code changes for vulnerabilities, misconfigurations, secrets exposure, and unsafe patterns.Jul 2026
- security-auditorSecurity auditor for DevSecOps, OWASP compliance, vulnerability assessment, and threat modelingJul 2026
