Stats
Actions
Tags
From aura-frog
Security agent providing OWASP reference patterns for vulnerability scanning, auth/authorization, secure coding, cryptography, API/mobile/infra security, testing, and compliance. Delegate for security reviews, audits, and best practices.
How this agent operates — its isolation, permissions, and tool access model
Agent reference
aura-frog:agents/reference/security-patternsThe summary Claude sees when deciding whether to delegate to this agent
**Source Agent:** `agents/security.md` **Load:** On-demand when deep security expertise needed --- - Dependency scanning (npm audit, Snyk, OWASP Dependency-Check) - Static code analysis (SonarQube, Semgrep, Bandit) - Dynamic scanning (OWASP ZAP, Burp Suite) - Container scanning (Trivy, Anchore) - Secret scanning (GitGuardian, TruffleHog) - OAuth 2.0 / OpenID Connect implementation review - JWT ...
Source Agent: agents/security.md
Load: On-demand when deep security expertise needed
Dependency Scanning:
Static Application Security Testing (SAST):
Dynamic Application Security Testing (DAST):
Secret Scanning:
Container Security:
Node.js:
Python:
PHP:
React Native:
AWS:
GCP:
Azure:
Authentication:
Authorization:
Input Validation:
Output Encoding:
Security Headers:
Cryptography:
API Security:
Dependencies:
Logging & Monitoring:
Data Storage:
Network:
Code Protection:
Authentication:
Command: security:audit
Command: security:deps
Command: security:scan
Node.js:
npm install helmet express-rate-limit express-validator
npm install --save-dev @microsoft/eslint-plugin-sdl
npm install --save-dev eslint-plugin-security
Python:
pip install bandit safety
pip install flask-talisman # Security headers for Flask
Container:
# Trivy
brew install trivy
trivy image myimage:latest
Secret Scanning:
# TruffleHog
pip install trufflehog
trufflehog git https://github.com/myorg/myrepo
Vulnerable:
const query = `SELECT * FROM users WHERE id = ${userId}`;
db.query(query);
Secure:
const query = 'SELECT * FROM users WHERE id = ?';
db.query(query, [userId]);
// Or with Prisma/TypeORM (safe by default)
prisma.user.findUnique({ where: { id: userId } });
Vulnerable:
res.send(`<h1>Hello ${username}</h1>`);
Secure:
import DOMPurify from 'dompurify';
res.send(`<h1>Hello ${DOMPurify.sanitize(username)}</h1>`);
// Or use templating engines with auto-escaping
res.render('hello', { username }); // EJS, Handlebars auto-escape
Vulnerable:
app.post('/transfer', (req, res) => {
// No CSRF protection
transfer(req.body.amount, req.body.to);
});
Secure:
import csrf from 'csurf';
app.use(csrf({ cookie: true }));
app.post('/transfer', (req, res) => {
// CSRF token validated automatically
transfer(req.body.amount, req.body.to);
});
Vulnerable:
import crypto from 'crypto';
const hash = crypto.createHash('md5').update(password).digest('hex');
Secure:
import bcrypt from 'bcrypt';
const hash = await bcrypt.hash(password, 12); // Cost factor 12
const valid = await bcrypt.compare(password, hash);
Vulnerable:
app.get('/user/:id', (req, res) => {
const user = await User.findById(req.params.id);
res.json(user); // No authorization check
});
Secure:
app.get('/user/:id', authenticate, (req, res) => {
if (req.user.id !== req.params.id && !req.user.isAdmin) {
return res.status(403).json({ error: 'Forbidden' });
}
const user = await User.findById(req.params.id);
res.json(user);
});
npx claudepluginhub nguyenthienthanh/aura-frog --plugin aura-frogOperational security agent that scans dependencies, checks supply chain integrity and secrets, validates OWASP compliance, and triages security incidents. Not for code-level audits (use code-auditor) or architectural review (use architecture-reviewer).
Security auditor for DevSecOps, OWASP Top 10 compliance, vulnerability assessment with CVSS scoring, threat modeling, and remediation plans.
Security specialist expert in OWASP Top 10, vulnerability scanning, penetration testing, secure coding practices, and audits for web/mobile apps. Delegate security scans, audits, deps checks, and fixes.