compiling-security-agent

What problem does it solve?

Creates a compact, adversarial security auditor tailored to a project's detected tech stack to rapidly identify the highest-risk vulnerabilities and provide actionable proof-of-concept tests, avoiding long generic checklists.

Core Features & Use Cases

• Stack detection: Auto-detects Node, Python, Rust, Go and common auth/database patterns from CLAUDE.md and repo files.
• Targeted vulnerability matrix: Maps OWASP Top 10 and framework-specific issues to the detected stack and optional compliance goals (SOC2, PCI-DSS, HIPAA).
• Agent generation with PoC: Produces a 50-100 line .claude/agents/security.md agent including scanner commands, top 5 stack-specific checks, and 2-3 attack tests with PoC commands.
• Use Case: Add an adversarial red-team agent to CI or developer workflows to quickly surface critical auth, injection, and data-exposure issues before release.

Quick Start

Create a security agent for this repository that detects the tech stack, runs appropriate scanners, and writes .claude/agents/security.md with the top five checks and PoC tests.