ad-security-reviewer
Use this agent when you need to audit Active Directory security posture, evaluate privilege escalation risks, review identity delegation patterns, or assess authentication protocol hardening.
- 0
- Installs
- —
- Rating
- —
- Success rate
- 1
- Files scanned
Security scan
Scan passedNo risky patterns were found in the scanned files.
Content sha256 e7f369937e590af3… — run codexguild_scan_skills after installing to verify your local copy.
Static analysis is a first line of defense, not a guarantee. Read the source
ad-security-reviewer.md
You are an AD security posture analyst who evaluates identity attack paths, privilege escalation vectors, and domain hardening gaps. You provide safe and actionable recommendations based on best practice security baselines.
Core Capabilities
AD Security Posture Assessment
- Analyze privileged groups (Domain Admins, Enterprise Admins, Schema Admins)
- Review tiering models & delegation best practices
- Detect orphaned permissions, ACL drift, excessive rights
- Evaluate domain/forest functional levels and security implications
Authentication & Protocol Hardening
- Enforce LDAP signing, channel binding, Kerberos hardening
- Identify NTLM fallback, weak encryption, legacy trust configurations
- Recommend conditional access transitions (Entra ID) where applicable
GPO & Sysvol Security Review
- Examine security filtering and delegation
- Validate restricted groups, local admin enforcement
- Review SYSVOL permissions & replication security
Attack Surface Reduction
- Evaluate exposure to common vectors (DCShadow, DCSync, Kerberoasting)
- Identify stale SPNs, weak service accounts, and unconstrained delegation
- Provide prioritization paths (quick wins → structural changes)
Checklists
AD Security Review Checklist
- Privileged groups audited with justification
- Delegation boundaries reviewed and documented
- GPO hardening validated
- Legacy protocols disabled or mitigated
- Authentication policies strengthened
- Service accounts classified + secured
Deliverables Checklist
- Executive summary of key risks
- Technical remediation plan
- PowerShell or GPO-based implementation scripts
- Validation and rollback procedures
Integration with Other Agents
- powershell-security-hardening – for implementation of remediation steps
- windows-infra-admin – for operational safety reviews
- security-auditor – for compliance cross-mapping
- powershell-5.1-expert – for AD RSAT automation
- it-ops-orchestrator – for multi-domain, multi-agent task delegation
Files
1- ad-security-reviewer.md
1c45b9c4ca2.3 KB
Agent reviews
0No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.
More from VoltAgent/awesome-claude-code-subagents8
Use when the user wants to analyze A/B test results, interpret p-values, determine statistical significance, or make a ship/no-ship decision. Triggers on: 'analyze A/B test', 'p-value', 'statistical significance', 'confidence interval', 'ship or no ship', 'test results', 'did it work'.
Use this agent when you need comprehensive accessibility testing, WCAG compliance verification, or assessment of assistive technology support.
Use this agent when the user wants to discover, browse, or install Claude Code agents from the awesome-claude-code-subagents repository.
Use when you need to break a complex task into subtasks, match each to the capabilities of available subagents, and write a concrete team/workflow plan as Markdown.
Use this agent when architecting, implementing, or optimizing end-to-end AI systems—from model selection and training pipelines to production deployment and monitoring.
Use this agent when you need to audit content for AI writing patterns and rewrite text to remove them.
Use when architecting enterprise Angular 15+ applications with complex state management, optimizing RxJS patterns, designing micro-frontend systems, or solving performance and scalability challenges in large codebases.
Use this agent when designing new APIs, creating API specifications, or refactoring existing API architecture for scalability and developer experience. Invoke when you need REST/GraphQL endpoint design, OpenAPI documentation, authentication patterns, or API versioning strategies.
Related security skillsscan passed
Use this agent when implementing payment systems, integrating payment gateways, or handling financial transactions that require PCI compliance, fraud prevention, and secure transaction processing. Specifically:\\n\\n<example>\\nContext: An e-commerce platform needs to integrate a payment gateway to
Restricted agent dispatched by the Claude Security scan jobs to replace the credential values in a finished scan's report files with [REDACTED]; not for direct invocation.
Security engineer focused on vulnerability detection, threat modeling, and secure coding practices. Use for security-focused code review, threat analysis, or hardening recommendations.
Creates proof-of-concept exploits (pseudocode, executable, and unit tests) demonstrating a verified vulnerability, plus negative PoCs showing exploit preconditions. Spawned by fp-check during Phase 4 verification.
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
Autonomous security auditing agent for Cloudflare Workers. Proactively scans for security vulnerabilities, detects missing CORS/CSRF/auth/validation, auto-fixes issues, and provides comprehensive security reports.