Security Auditor by borghei
Performs comprehensive security audits on code and configuration. Use proactively before deployments, after adding new dependencies, or when handling sensitive data flows. Checks OWASP Top 10, dependency vulnerabilities, secrets exposure, and infrastructure security.
- Type
- Subagent
- Repository
- borghei/Claude-Skills
- GitHub stars
- 834
- License
- Not declared
- Repo last updated
- Sep 21, 2026
- Source file
- .claude/agents/security-auditor.md
- Model
- sonnet
What Security Auditor by borghei is
Security Auditor by borghei is a subagent published in the borghei/Claude-Skills repository on GitHub, which has about 834 stars. The repository describes itself as: “372 AI skills, 76 expert agents, and 867 stdlib Python tools for every team: engineering, PM, marketing, C-level, compliance, business ops, and research. Installs on Claude Code, Cursor, Codex, Gemini, Copilot, and 6 other AI assistants.”
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Security Auditor and get back a compact result.
It is set up to use these tools: Read, Glob, Grep, Bash. Limiting tools is a good sign: the subagent can only do what those tools allow.
How to install Security Auditor by borghei
Claude Code
- Download security-auditor.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
The repository does not declare an open-source license, so we list only the outline of the file here. Read the full text on GitHub.
- Security Audit Protocol
- 1. Secrets & Credentials Scan
- 2. OWASP Top 10 Check
- 3. Infrastructure Security
- 4. Output Format
- Skill-Powered Analysis
- Tools to Run
- Pass/Fail Thresholds
- Workflow
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Security Auditor by borghei?
Security Auditor by borghei is a subagent for Claude Code and Claude Cowork from the borghei/Claude-Skills repository on GitHub. Performs comprehensive security audits on code and configuration. Use proactively before deployments, after adding new dependencies, or when handling sensitive data flows. Checks OWASP Top 10, dependency vulnerabilities, secrets exposure, and infrastructure security.
How do I install Security Auditor by borghei in Claude Code?
Download security-auditor.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Security Auditor by borghei in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Security Auditor by borghei safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Cs Developer Advocate Developer advocate for technical content, community engagement, and developer-marketing measurement Subagent · borghei/Claude-Skills
- Cs Engineering Director VP/Head of Engineering agent for portfolio-level engineering decisions, cross-team visibility, and organizational scaling Subagent · borghei/Claude-Skills
- Cs Ecommerce Strategist Strategic vertical advisor for ecommerce founders covering unit economics, fulfillment models (DTC self / 3PL / FBA / dropship / retail), and channel strategy (DTC / Amazon / wholesale / retail) Subagent · borghei/Claude-Skills
- Cs Edtech Strategist Strategic vertical advisor for edtech founders covering FERPA / COPPA / state student-data laws, K-12 vs higher-ed vs corporate L&D market selection, and district sales motion Subagent · borghei/Claude-Skills
- Skill Creator Authors new skills for this library and grades existing ones against the repo's eval template. Operates in four modes: Create, Grade, Compare, Analyze. Subagent · borghei/Claude-Skills
- Qa Engineer Performs quality assurance analysis on code including test coverage assessment, test generation, bug hunting, and quality metrics. Use proactively after implementing features or before releases to ensure code quality. Subagent · borghei/Claude-Skills
- Solo Founder Cross-domain generalist running a one-person startup. Wears every hat, optimizes ruthlessly for leverage, and filters all decisions through impact per hour. Subagent · borghei/Claude-Skills
- Product Manager Customer-obsessed product leader who combines user empathy with technical feasibility judgment. Thinks in outcomes and jobs-to-be-done, not features. Subagent · borghei/Claude-Skills