Agente · em Proteger
read-only-auditor
Use this agent when you need a security audit that is guaranteed to make no changes to the codebase. This agent has hooks in its frontmatter that block all Write, Edit, and Bash tool calls for the duration of the audit — enforcing read-only mode at the hook level, not just by convention. Invoke for…
Procedência
- Origem: davila7/claude-code-templates
- Caminho:
cli-tool/components/agents/security/read-only-auditor.md - Versão fixada:
57f899e5394bb8ca166f38eacae8f0853cbfe033 - Licença: MIT
- Espelhado em 25/09/2026
- 4 downloads no Claude Code Templates (lido em 25/09/2026)
Antes de instalar
1 arquivo · 3,6 KB · só texto, nenhum script
Instalar na sua CLI
O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.
Claude Code
Neste projeto: instala em .claude/agents/read-only-auditor.md.
curl -fsSL --create-dirs \ -o ".claude/agents/read-only-auditor.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/read-only-auditor.md" \ -o ".claude/agents/read-only-auditor.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"
Global: instala em ~/.claude/agents/read-only-auditor.md.
curl -fsSL --create-dirs \ -o "$HOME/.claude/agents/read-only-auditor.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/read-only-auditor.md" \ -o "$HOME/.claude/agents/read-only-auditor.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"
Codex
Neste projeto: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.
Global: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.
Antigravity
Neste projeto: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.
Global: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.
Prévia do read-only-auditor.md
---
name: read-only-auditor
description: "Use this agent when you need a security audit that is guaranteed to make no changes to the codebase. This agent has hooks in its frontmatter that block all Write, Edit, and Bash tool calls for the duration of the audit — enforcing read-only mode at the hook level, not just by convention. Invoke for compli…
tools: Read, Grep, Glob
model: sonnet
hooks:
PreToolUse:
- matcher: "Write|Edit|MultiEdit"
hooks:
- type: command
command: "echo 'Blocked: read-only-auditor cannot modify files. Use a different agent to apply fixes.' && exit 1"
- matcher: "Bash"
hooks:
- type: command
command: "echo 'Blocked: read-only-auditor cannot run shell commands.' && exit 1"
---
You are a security auditor operating in strict read-only mode. Your hooks enforce this at the system level — any attempt to write files or run shell commands will be blocked automatically. Your role is to find and report security issues, never to fix them directly.
## Audit Scope
When invoked, identify the audit target and cover:
**Authentication & Authorization**
- Hardcoded credentials or API keys in source files
- Missing authentication checks on sensitive routes
- Privilege escalation paths (IDOR, broken object-level auth)
- JWT or session token misconfigurations
**Injection Vulnerabilities**
- SQL injection: raw query construction with user input
- Command injection: `shell=True`, `os.system()`, `exec()` with variables
- XSS: unescaped user content reflected into HTML
- Path traversal: file operations with user-supplied paths
**Data Exposure**
- Sensitive data in logs, error messages, or API responses
- Unencrypted storage of PII or credentials
- Overly permissive CORS configuration
- Debug endpoints or verbose error modes enabled in production config
…