Team Security · v3.1.0

Security Review Board

Four reviewers that argue with each other so attackers do not get to.

A review-only team that never writes features. Point it at a PR, a service or a whole repository: the Threat Modeler maps the surface, the AppSec Reviewer reads the code, the Supply-Chain Auditor reads the lockfile, and the Chair writes a report your CISO can sign.

Findings come with severity, exploit scenario and a proposed patch, never with a lecture.

Agents 4

01Threat ModelerAssets, trust boundaries, abuse cases.
02AppSec ReviewerInjection, authz, crypto, secrets in code.
03Supply-Chain AuditorDependencies, lockfiles, CI permissions.
04Review ChairConsolidates findings into a signed report.

Skills 7

01OWASP Top 10Detection patterns and fixes per category.
02Secrets HygieneDetection, rotation, prevention hooks.
03Dependency AuditAdvisories, pinning, provenance.
04AuthZ PatternsRBAC, ABAC, tenant isolation checks.
05Crypto ReviewAlgorithms, key management, TLS config.
06CI HardeningLeast privilege for pipelines and tokens.
07Report WritingSeverity rubric and executive summary.

Workflows 2

pr-review.md
repo-audit.md

security-review-board-3.1.0.zip17 files

README.mdsetup, roles, conventions
LICENSEHIRRE commercial license
install.shcopies .claude/ into your repo
.claude/
- agents/
  - threat-modeler.mdAssets, trust boundaries, abuse cases.
  - appsec-reviewer.mdInjection, authz, crypto, secrets in code.
  - supply-chain-auditor.mdDependencies, lockfiles, CI permissions.
  - review-chair.mdConsolidates findings into a signed report.
- skills/
  - owasp-top-10/
    - SKILL.mdDetection patterns and fixes per category.
  - secrets-hygiene/
    - SKILL.mdDetection, rotation, prevention hooks.
  - dependency-audit/
    - SKILL.mdAdvisories, pinning, provenance.
  - authz-patterns/
    - SKILL.mdRBAC, ABAC, tenant isolation checks.
  - crypto-review/
    - SKILL.mdAlgorithms, key management, TLS config.
  - ci-hardening/
    - SKILL.mdLeast privilege for pipelines and tokens.
  - report-writing/
    - SKILL.mdSeverity rubric and executive summary.
- settings.jsonpermissions, hooks, defaults
workflows/
- pr-review.md
- repo-audit.md

Installunzip security-review-board-3.1.0.zip && ./security-review-board/install.sh

€149one-time

→ Colleagues

Also worth hiring

All teams →

Team

Full-Stack Squad

Eight specialists that take a ticket from spec to release without you babysitting.

8 agents · 14 skillsProduct · v2.3.0

Team

SaaS Launch Crew

Auth, billing, onboarding and email — the boring 80% of a SaaS, done properly.

6 agents · 11 skillsProduct · v1.8.2

Team

Data Platform Team

Pipelines, models, quality checks and dashboards that agree with each other.

5 agents · 9 skillsData · v1.4.0