4. Security & Compliance

Provides security patterns for Next.js 15, including server action hardening, CSRF protection, rate limiting, and RLS policy generation for veterinary platforms.

Provides JWT authentication, token verification, and security middleware for secure user authentication and endpoint protection.

Systematically identifies security vulnerabilities in code through review methodology, emphasizing detection techniques over secure coding practices.

Provides DevSecOps practices for secure CI/CD pipelines, including OIDC authentication, secrets management, and container security scanning.

Conducts comprehensive codebase audits evaluating security, architecture, test coverage, documentation, dependencies, and maintainability to assess overall code health.

Performs detailed criterion-by-criterion evaluation of web content for WCAG 2.1 accessibility compliance.

Conducts security audits with OWASP Top 10 analysis, compliance checks, and threat modeling via PAL MCP.

Manages Software Bill of Materials (SBOM) generation, formats, and vulnerability tracking to ensure supply chain security compliance.

Specializes in EU AI Act Article 73 compliance for serious incident detection, classification, 15-day reporting, and regulatory notifications with AI-assisted workflows.

Automates open source license compliance through compatibility analysis, obligation tracking, and workflow management for software projects.

Provides guidance for implementing responsible AI practices aligned with regulatory frameworks like EU AI Act and NIST AI Risk Management Framework.

AI-powered automated testing tool that ensures security, compliance, and system integrity by preventing injection attacks and generating fact-check reports.

Generates Claude Code skills for security testing tools and techniques by analyzing the Trail of Bits Testing Handbook.

Specializes in EU AI Act Article 40 compliance, ensuring harmonized standards, API standardization, and interoperability to prevent vendor lock-in and enable ecosystem integration.

Conducts Fundamental Rights Impact Assessments (FRIA) for high-risk AI systems to ensure compliance with EU AI Act Article 27 requirements.

Provides HTTP interception and security testing for web applications to identify vulnerabilities.

Plans AI safety strategies including alignment, guardrails, red teaming, and compliance with EU AI Act and NIST AI RMF.

Automates email notifications for EU AI Act Article 13 compliance, summarizing codebase changes and distributing required documentation.

Advises on ethical AI implementation, bias assessment, and regulatory compliance for high-risk AI systems.

Provides Docker container security best practices including non-root users, minimal images, and security hardening for finance applications.

Expert in security incident response, conducting evidence collection, forensic analysis, and coordinated mitigation to minimize impact and prevent recurrence.

Validates AI2AI implementations for privacy compliance, ensuring anonymized data exchange and absence of personal identifiers in privacy-preserving learning.

Generates legally compliant Impressum and Datenschutz pages for German and Swiss websites, ensuring DSGVO adherence.

Enforces privacy protection patterns including anonymization, no PII in logs, and GDPR compliance for secure user data handling.