4. Security & Compliance

Enterprise security and compliance tool ensuring regulatory adherence and secure coding practices in development environments.

Enterprise security skill for detecting, analyzing, and mitigating advanced security threats in development environments.

Enterprise authentication platform leveraging Clerk with AI-driven identity architecture and Context7 integration for secure, scalable user management.

Provides proactive security engineering for PAI projects, including threat modeling, CMMC compliance, and security-first design to prevent issues during development.

Delivers production-ready security analysis with CMMC Level 2 compliance, including vulnerability scanning, threat modeling, and remediation guidance for 50+ security patterns.

Enables Zero Trust security architecture implementation for enterprise environments, focusing on advanced security configurations and compliance enforcement.

Securely manages environment variables and secrets for MoAI-ADK projects, preventing credential exposure.

Comprehensive system for tracking code modifications, file changes, and project evolution with audit trails to meet compliance and collaboration needs.

Generates secure Content Security Policy (CSP) headers to prevent XSS and other web vulnerabilities in applications.

Offers comprehensive security patterns and best practices for all development phases, covering OWASP Top 10, authentication, input validation, and security testing.

Manages Row Level Security (RLS) policies in Supabase for secure data access control and multi-tenant isolation.

Provides a security checklist for reviewing code against OWASP vulnerabilities, authentication, and encryption best practices.

Provides regulatory guidance for U.S. mortgage servicing software, covering RESPA, TILA, FCRA, GSE requirements, and compliance workflows.

Provides regulatory guidance for Canadian mortgage servicing, covering FCAC, OSFI, CMHC requirements, and mortgage servicing regulations.

Generates Helmet.js middleware configuration for Express applications to enforce security headers and protect against common web vulnerabilities.

Generates secure JWT authentication configurations and utilities for API endpoints, enhancing security through token-based authentication.

Validates role-based access control (RBAC) for four-tier permissions in NABIP AMS, ensuring correct implementation of permission checks, RLS policies, and UI access controls.

Audits protected files, generates protection reports, and verifies consistency for security compliance and system maintenance.

Enables bypassing Play Integrity verification to circumvent spoofing detection for Android device integrity checks.

Automates full Magisk installation on Android devices, enabling root access and system modifications for security testing and research.

Analyzes codebases to generate secure sandbox configurations for Claude Code, including permission settings based on detected dependencies.

Audits service mesh configurations (Istio, Consul, Linkerd) for security vulnerabilities and maps findings to NIST 800-53 for compliance assessments.

Creates German tax-compliant business meal expense receipts (Bewirtungsbelege) by combining original receipts with signed forms for tax documentation.

Provides comprehensive server-side input validation with client-side feedback to prevent injection attacks and ensure data integrity.