4. Security & Compliance

Analyzes project dependencies for security vulnerabilities, outdated packages, and license compliance across multiple package managers.

Conducts comprehensive security audits including vulnerability scanning, compliance checks, and infrastructure analysis to identify and mitigate security risks.

Automatically analyzes password strength to enforce security standards and prevent weak password usage in systems.

Checks application code for insecure deserialization vulnerabilities to prevent security breaches during development.

Real-time detection of SQL injection attempts to prevent database attacks. Auto-activates for security fundamentals tasks.

Automates zero trust security configuration for systems and services, ensuring strict access controls and compliance.

Scans software components for license compliance, ensuring adherence to open-source and legal requirements in security contexts.

Automates security vulnerability checks, best practices validation, and CLAUDE.md compliance for Claude Code plugins in designated repositories.

Audits access control systems for vulnerabilities, misconfigurations, and compliance with security best practices in cloud and application environments.

Auto-generates regulatory compliance checklists to ensure adherence to governance standards in enterprise workflows.

Manages data privacy, retention, and GDPR compliance for Gamma integrations and user data workflows.

Scans codebases for exposed secrets and credentials using pattern matching and entropy analysis to prevent security breaches.

Validates JWT tokens for integrity and authenticity in authentication processes.

Automates SOC 2 audit preparation by gathering evidence, assessing controls, and identifying compliance gaps against Trust Service Criteria.

Assists in implementing and managing OAuth2 authorization flows, ensuring secure authentication and access control.

Generates secure configurations and setup code for integrating with secrets managers like Hashicorp Vault and AWS Secrets Manager, following security best practices.

Automatically scans code for reflected, stored, and DOM-based XSS vulnerabilities, providing safe proof-of-concept payloads for security audits and code reviews.

Configures AI interaction audit logging for compliance, activating on specific trigger phrases to handle security audit and regulatory requirements.

Generates security rules for SIEM systems to monitor and detect threats in real-time.

Enables GDPR/CCPA-compliant data handling for Vercel, including PII redaction and retention policy configuration.

Guides users through security incident response lifecycle, including classification, evidence collection, and remediation steps for breaches and ransomware.

Validates and processes Windsurf webhook events securely using signature verification to prevent tampering and unauthorized access.

Configures enterprise security features in PostHog including SSO, role-based access control, and organization management.

Provides implementation guidance for database audit logging, including strategies like CDC and trigger-based logging, to ensure compliance.