4. Security & Compliance

Deep code intelligence for security scanning (OWASP, CWE), call graph analysis, and supply chain compliance via Narsil MCP.

Performs security code reviews to identify vulnerabilities and enforce secure coding standards in software development.

Manages API keys, credentials, and sensitive configuration securely using secrets.json patterns with environment variable fallbacks.

Provides security-focused input validation to prevent common web vulnerabilities such as XSS and SQL injection.

Provides secure coding guidelines and vulnerability checks for C programming to prevent memory safety issues.

Secures terminal access via authentication, session monitoring, and access control for command-line interfaces.

Enforces coverage policies with 100% requirement adherence and defined exclusion rules for regulatory compliance.

Identifies and mitigates memory safety vulnerabilities in code, such as buffer overflows and use-after-free errors.

Conducts threat modeling to identify and mitigate security risks in system architecture.

Manages and secures sensitive credentials and secrets, preventing exposure in code repositories and deployments.

Monitors blocked operations, prevents destructive commands, and coordinates incident response to maintain system security and integrity.

Models and mitigates security risks in React 18's rendering and hydration flows to prevent common web vulnerabilities.

Provides a structured incident response pipeline prioritizing system recovery, followed by restoration and analysis to minimize downtime.

Manages secure user authentication flows including login, registration, session handling, and password recovery for application access.

Verifies and enforces coding standards, AI guidelines, and workspace compliance across repositories to maintain development best practices and regulatory adherence.

Conducts security reviews, threat modeling, and provides remediation guidance for authentication, secrets, PII, public endpoints, and dependency upgrades.

Provides a comprehensive guide for security agent skills including penetration testing, code auditing, threat hunting, and digital forensics.

Specialized assistant for Japanese paid leave (有給休暇) regulations and labor compliance, ensuring adherence to local labor laws.

Offers essential penetration testing command references for network scanning, vulnerability assessment, and exploit execution using tools like nmap, metasploit, and nikto.

Provides structured ethical hacking methodology covering penetration testing lifecycle, reconnaissance, vulnerability exploitation, and report writing.

Conducts comprehensive security vulnerability scanning and code quality assessment for software projects.

Performs SSH penetration testing: enumerates configurations, brute-forces credentials, and audits security vulnerabilities.

Simulates HTML injection attacks to identify and test content injection vulnerabilities in web applications.

Provides cloud security assessment techniques for Azure, AWS, and GCP, including penetration testing, resource enumeration, and misconfiguration exploitation.