NeVibeCode · 63 items
Subagents for Security
Subagents for Security: what each one does, an install command and example prompts.
code-reviewer
official subagent This subagent checks code changes for bugs, security issues, and project-rule violations. Use it when a review should focus on findings that matter.
31,050installs
security-auditor
official subagent This subagent searches code for security flaws and gives engineers concrete fixes. Use it to review a project before hardening or modernization work.
10,718installs
test-engineer
official subagent This subagent captures legacy behavior in tests and compares it with a rewritten implementation. Use it before changing existing modules.
9,715installs
code-reviewer subagent Reviews code changes for bugs, security flaws and maintenance issues. Use it before merging complex work or auditing a project.
31,050installs
security-auditor subagent Audits security controls, vulnerabilities, risks, and compliance gaps across systems, infrastructure, and processes. Use it when you need documented findings.
10,718installs
devops-engineer subagent This subagent reviews infrastructure and helps with CI/CD, containers, and deployment workflows. Use it when you want to automate software delivery or add security checks to the process.
7,392installs
security-engineer subagent Automates DevSecOps workflows, CIS benchmark checks, and vulnerability scanning. Useful when securing cloud infrastructure or embedding security controls into CI/CD.
3,243installs
cloud-architect subagent Designs, reviews, and optimizes multi-cloud infrastructure across AWS, Azure, and GCP while planning migrations and disaster recovery.
3,067installs
backend-developer subagent Subagent for building backend APIs and microservices in Node.js, Python, and Go. Helps implement relational schemas, caching, and OWASP security rules.
2,724installs
penetration-tester subagent Runs authorized security tests, validates vulnerabilities and reports remediation steps. Use it to assess systems within an agreed scope.
2,407installs
database-admin subagent This subagent helps plan, migrate, monitor, and operate cloud databases. Use it for architecture work, reliability tasks, and database operations.
CX Codex
2,185installs
network-engineer subagent Designs, optimizes, and debugs cloud and hybrid network infrastructure. Useful when configuring VPC peering, zero-trust security policies, or resolving latency spikes.
1,871installs
legal-advisor subagent Drafts privacy policies, terms of service, and DPA documents aligned with GDPR and CCPA. Useful when your app needs legal notices and compliance texts.
CX Codex
1,776installs
wordpress-master subagent Architect, optimize, and troubleshoot WordPress setups, from custom themes and plugins to WooCommerce and enterprise multisite networks.
763installs
risk-manager subagent Subagent for analyzing financial, operational, and regulatory risk. Helps teams quantify exposure, design control frameworks, and validate risk models.
550installs
fintech-engineer subagent Designs payment systems, banking integrations, and compliance-focused financial services with strict transaction accuracy. Useful for payment gateways and KYC rules.
518installs
azure-iac-generator
official subagent Generates Bicep, Terraform, ARM, and Pulumi infrastructure templates with format-specific validation. Verifies API schemas via MCP servers before outputting code.
188installs
payment-integration subagent A Claude Code subagent for integrating payment gateways, subscription lifecycles, and PCI DSS compliance into your codebase.
463installs
database-administrator subagent A subagent for database performance work, replication, backups, recovery, and production infrastructure. Use it when database reliability needs a structured review.
452installs
kubernetes-specialist subagent This subagent designs, configures, deploys, and troubleshoots Kubernetes clusters and workloads. Use it when cluster operations, security, or scaling need focused review.
450installs
stackhawk-security-onboarding
official subagent This subagent checks whether a repository has an application or API worth testing, then prepares StackHawk configuration and a GitHub Actions workflow. Use it to set up security scans for an app.
179installs
payment-integration subagent This subagent integrates Stripe, PayPal, and other payment processors, covering subscriptions, checkout, and webhooks. Use it for billing work.
CX Codex
463installs
compliance-auditor subagent Reviews controls, policies, and data flows against regulatory requirements, then helps identify gaps and prepare audit evidence. Use it to assess an existing compliance setup.
421installs
electron-pro subagent Subagent for building desktop software on Electron 27+. Enforces context isolation, secure IPC via preload scripts, auto-updaters, and signed installers.
376installs
blockchain-developer subagent This subagent helps build smart contracts, DApps, and blockchain protocols with attention to security, gas costs, and Web3 integration. Use it for Solidity and EVM work.
375installs
dependency-manager subagent Audits dependencies for vulnerabilities and version conflicts, then looks for duplicate or unused packages. It also supports update automation and bundle-size work.
356installs
blockchain-developer subagent Helps build and review smart contracts, DeFi protocols, and Web3 apps. Use it for blockchain infrastructure and integrations across several ecosystems.
CX Codex
375installs
terraform-engineer subagent Designs, refactors, and scales Terraform infrastructure. It handles multi-cloud setups, module architecture, remote state management, and security compliance.
328installs
incident-responder subagent This subagent handles active service outages and security breaches. It guides evidence gathering, isolates compromised components, and assists with post-incident recovery.
265installs
slack-expert subagent This subagent builds Slack apps, connects Slack APIs, and reviews bot code for security. Use it when a project needs a Slack integration or audit.
246installs
azure-infra-engineer subagent Designs and manages Azure infrastructure across networking, Entra ID, PowerShell, and Bicep. Use it to plan deployments, review access, or automate operations.
245installs
iot-engineer subagent This subagent helps plan IoT systems from device connectivity and edge processing to cloud services. Use it when a project has varied connectivity needs or substantial data flows.
238installs
m365-admin subagent Automates Microsoft 365 administration tasks, including Exchange mailboxes, Teams, SharePoint sites, and license management via Graph API. Built for M365 engineers.
229installs
ad-security-reviewer subagent Audits Active Directory security, detects privilege escalation paths, and generates remediation scripts. Use it to inspect GPO rules and domain trusts.
212installs
powershell-5.1-expert subagent A subagent for PowerShell 5.1 automation on Windows, covering Active Directory, DNS, DHCP, and GPO tasks in legacy .NET Framework environments.
196installs
it-ops-orchestrator subagent Coordinates multi-domain IT operations by routing tasks across PowerShell, Azure, M365, and Active Directory subagents.
194installs
powershell-security-hardening subagent This subagent hardens PowerShell scripts, remoting, and Windows settings. Use it to review automation, credentials, logs, and CI/CD security gates.
194installs
conversation-analyzer
official subagent Inspects session transcripts to spot agent mistakes and user corrections, extracting regex patterns for automated prevention hooks.
★ 44,635repo stars
legacy-analyst
official subagent This subagent traces how older codebases work, maps dependencies, and spots dead code. Use it to investigate what an unfamiliar system actually does.
★ 44,635repo stars
scan-researcher
official subagent A read-only security auditing subagent for Claude Code. Traces vulnerabilities from untrusted inputs to risky sinks across repository files without executing project code.
★ 44,635repo stars
1–40 of 63
