Code Security Analyzer
Expert in static code analysis, secure coding patterns, and identifying security anti-patterns. Performs deep code review for security vulnerabilities and ensures secure development practices.
- Type
- Subagent
- Repository
- ChrisRoyse/610ClaudeSubagents
- GitHub stars
- 117
- License
- Not declared
- Repo last updated
- Aug 10, 2025
- Source file
- agents/code-security-analyzer.md
What Code Security Analyzer is
Code Security Analyzer is a subagent published in the ChrisRoyse/610ClaudeSubagents repository on GitHub, which has about 117 stars.
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Code Security Analyzer and get back a compact result.
It is set up to use these tools: Read, Write, Edit, MultiEdit, Grep, Glob, Bash. Limiting tools is a good sign: the subagent can only do what those tools allow.
How to install Code Security Analyzer
Claude Code
- Download code-security-analyzer.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
The repository does not declare an open-source license, so we list only the outline of the file here. Read the full text on GitHub.
- ALWAYS CLOSELY INSPECT THE RESULTS OF SUBAGENTS AND MAKE SURE THEY AREN'T LIEING AND BEING HONEST AND TRUTHFUL.
- Core Code Security Analysis
- Language-Specific Security Analysis
- Rust Security Analysis
- Web Languages Security
- Injection Vulnerability Detection
- SQL Injection Prevention
- Command Injection Detection
- Input Validation and Sanitization
- Input Security Analysis
- Output Encoding Verification
- Authentication and Authorization
- Authentication Security
- Authorization Checks
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Code Security Analyzer?
Code Security Analyzer is a subagent for Claude Code and Claude Cowork from the ChrisRoyse/610ClaudeSubagents repository on GitHub. Expert in static code analysis, secure coding patterns, and identifying security anti-patterns. Performs deep code review for security vulnerabilities and ensures secure development practices.
How do I install Code Security Analyzer in Claude Code?
Download code-security-analyzer.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Code Security Analyzer in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Code Security Analyzer safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Declarative Code Writer Agent Focuses on "what" not "how" (SQL, HTML, CSS, infrastructure-as-code, configuration files, GraphQL). Expert in constraint-based programming and specification-driven development. Subagent · ChrisRoyse/610ClaudeSubagents
- Deployment Fiasco Forecaster Expert in envisioning deployment rollbacks, failed migrations, and downtime risks. Demands contingency and rollback strategies while predicting deployment failure scenarios before they occur in production. Subagent · ChrisRoyse/610ClaudeSubagents
- Design Pattern Implementer Agent Specializes in Singleton, Factory, Observer, Command, MVVM, etc. Expert in Gang of Four patterns, modern patterns, and architectural pattern implementation. Subagent · ChrisRoyse/610ClaudeSubagents
- Dependency Security Patch Agent Expert in automated dependency management, security patching, and vulnerability remediation. Monitors dependencies, identifies security issues, and applies patches automatically. Subagent · ChrisRoyse/610ClaudeSubagents
- Code Structure Analyzer Expert in comprehensive code structure analysis, architectural mapping, module dependency visualization, and system topology understanding. Use for deep structural analysis and architecture comprehension reports. Subagent · ChrisRoyse/610ClaudeSubagents
- Code Robustness Opponent Expert in challenging common coding patterns for error-proneness, race conditions, and lack of testability. Identifies fragile code structures and implementation approaches that will cause production failures. Subagent · ChrisRoyse/610ClaudeSubagents
- Codebase Qa Agent Expert in answering ad hoc questions about codebases through intelligent search, analysis, and contextual understanding. Specializes in natural language querying of code knowledge. Subagent · ChrisRoyse/610ClaudeSubagents
- Code Reviewer Expert code review specialist focusing on code quality, security, performance, and maintainability. Use proactively after significant code changes for thorough review. Subagent · ChrisRoyse/610ClaudeSubagents