SENTINEL — Maquina Autonoma de Seguranca
Invocacao
/sentinel https://app.example.com # Producao (DEFENSIVE auto)
/sentinel ~/Claude/GitHub/raiz-platform # Local (OFFENSIVE auto)
/sentinel https://preview-xyz.vercel.app # Staging (HYBRID auto)
/sentinel ~/Claude/GitHub/fgts-platform --threshold 90
/sentinel https://app.example.com --audit-only
/sentinel --resume
/sentinel ~/Claude/GitHub/raiz-platform --mode defensive # Override modo
O que faz
Executa security + performance + compliance AUTONOMO em 5 fases:
- RECON — Mapeia superficie de ataque (endpoints, auth, headers, deps)
- SIEGE — Testa 6 dimensoes:
- S1-SHIELD: Headers, CORS, cookies, HTTPS
- S2-GATES: Auth bypass, session, RBAC
- S3-WALLS: Injection (SQL, XSS, CMD), validacao
- S4-VAULT: Secrets, .env, git history, deps
- S5-STRESS: Load test k6 (5-200 VUs)
- S6-GUARD: LGPD, PII, audit trail
- ARMOR — Hardening + fix de vulnerabilidades
- CONVERGE — Calcula SSS, loop ate >= threshold
- CERTIFY — Security Certificate, Load Report, Fix PR, issues
Modo Hybrid
| Ambiente |
Modo |
Payloads |
Load Test |
| Producao |
DEFENSIVE |
Nenhum |
Smoke (5 VUs) |
| Staging |
HYBRID |
Leves |
Load (50 VUs) |
| Local |
OFFENSIVE |
Completos |
Full (200 VUs) |
Execucao
Agent({
subagent_type: "ag-sentinel",
prompt: "{input do usuario}",
run_in_background: true,
mode: "auto"
})
Ferramentas Externas (opcionais)
| Ferramenta |
Proposito |
Install |
| k6 |
Load testing |
brew install k6 |
| trufflehog |
Secrets em git |
brew install trufflehog |
| semgrep |
SAST analysis |
pip3 install semgrep |
Se ausentes: degraded mode (grep manual) ou SKIP da dimensao.
Artefatos Produzidos
| Artefato |
Arquivo |
| Security Certificate |
docs/sentinel-certificate-YYYY-MM-DD.md |
| Load Test Report |
docs/sentinel-load-report-YYYY-MM-DD.md |
| Fix PR |
GitHub PR com hardening |
| Baselines |
sentinel-baselines.json |
| State (recovery) |
sentinel-state.json |
| KB Update |
~/.claude/shared/sentinel-kb/ |
| Issues backlog |
GitHub Issues label sentinel-finding |
1---2name: ag-sentinel3description: Maquina autonoma de seguranca, load testing e LGPD. 6 dimensoes, modo hybrid, convergencia SSS >= 80. Security Certificate + Load Report + Fix PR.4---56# SENTINEL — Maquina Autonoma de Seguranca78## Invocacao910```11/sentinel https://app.example.com # Producao (DEFENSIVE auto)12/sentinel ~/Claude/GitHub/raiz-platform # Local (OFFENSIVE auto)13/sentinel https://preview-xyz.vercel.app # Staging (HYBRID auto)14/sentinel ~/Claude/GitHub/fgts-platform --threshold 9015/sentinel https://app.example.com --audit-only16/sentinel --resume17/sentinel ~/Claude/GitHub/raiz-platform --mode defensive # Override modo18```1920## O que faz2122Executa security + performance + compliance AUTONOMO em 5 fases:23241. **RECON** — Mapeia superficie de ataque (endpoints, auth, headers, deps)252. **SIEGE** — Testa 6 dimensoes:26 - S1-SHIELD: Headers, CORS, cookies, HTTPS27 - S2-GATES: Auth bypass, session, RBAC28 - S3-WALLS: Injection (SQL, XSS, CMD), validacao29 - S4-VAULT: Secrets, .env, git history, deps30 - S5-STRESS: Load test k6 (5-200 VUs)31 - S6-GUARD: LGPD, PII, audit trail323. **ARMOR** — Hardening + fix de vulnerabilidades334. **CONVERGE** — Calcula SSS, loop ate >= threshold345. **CERTIFY** — Security Certificate, Load Report, Fix PR, issues3536## Modo Hybrid3738| Ambiente | Modo | Payloads | Load Test |39|----------|------|----------|-----------|40| Producao | DEFENSIVE | Nenhum | Smoke (5 VUs) |41| Staging | HYBRID | Leves | Load (50 VUs) |42| Local | OFFENSIVE | Completos | Full (200 VUs) |4344## Execucao4546```47Agent({48 subagent_type: "ag-sentinel",49 prompt: "{input do usuario}",50 run_in_background: true,51 mode: "auto"52})53```5455## Ferramentas Externas (opcionais)5657| Ferramenta | Proposito | Install |58|-----------|-----------|---------|59| k6 | Load testing | `brew install k6` |60| trufflehog | Secrets em git | `brew install trufflehog` |61| semgrep | SAST analysis | `pip3 install semgrep` |6263Se ausentes: degraded mode (grep manual) ou SKIP da dimensao.6465## Artefatos Produzidos6667| Artefato | Arquivo |68|----------|---------|69| Security Certificate | `docs/sentinel-certificate-YYYY-MM-DD.md` |70| Load Test Report | `docs/sentinel-load-report-YYYY-MM-DD.md` |71| Fix PR | GitHub PR com hardening |72| Baselines | `sentinel-baselines.json` |73| State (recovery) | `sentinel-state.json` |74| KB Update | `~/.claude/shared/sentinel-kb/` |75| Issues backlog | GitHub Issues label `sentinel-finding` |
aibot88