4. Security & Compliance

Configures Row Level Security (RLS) policies in Supabase to enforce granular data access controls based on user permissions.

Performs security audits including penetration testing, OWASP risk assessment, and authentication/authorization design reviews.

Provides a structured security review checklist to identify vulnerabilities and ensure compliance with security standards.

Provides tools for implementing authentication and authorization flows, including login, sessions, JWT, OAuth, and access control.

Detects and remediates XSS and SQL injection vulnerabilities in IBL5 PHP code through security audits.

Audits code and plans against the 9 Articles of Development and Pre-Implementation Gates to ensure compliance before submission or review.

Conducts security reviews for authentication, user input validation, and confidential data handling, covering OWASP Top 10 vulnerabilities.

Enforces a default-deny security policy for Supabase by mandating strict Row-Level Security (RLS) and 'WITH CHECK' clauses to prevent unauthorized data access.

Provides a security coding checklist to enforce MaiHouses security policies and guardrails during development.

Performs pre-commit checks to prevent accidental exposure of secrets like API keys and credentials in code repositories.

Enforces Supabase schema validation, RLS enforcement, and API security best practices to secure backend data and access.

Synchronizes user and role permissions globally to maintain consistent access control and compliance across systems.

Ensures critical user actions are logged for security auditing and compliance with UAG/Trust Room standards.

Provides expert security engineering for PayU's digital banking platform, ensuring application security, DevSecOps integration, and PCI-DSS/OJK compliance.

Automatically scans pull requests for security vulnerabilities to prevent issues from reaching production.

Provides expert quality assurance for PayU's digital banking platform, focusing on test automation, performance validation, and financial regulatory compliance verification.

Provides security audit guidelines covering OWASP Top 10, secure coding practices, and code review checklists for vulnerability prevention.

Establishes foundational security definitions, safety rules, and security boundaries for GitHub skills.

Conducts security vulnerability scans and code audits, including dependency checks and CVE analysis for applications and dependencies.

Scans project dependencies, code patterns, and secrets for security vulnerabilities using documented tooling.

Scans project dependencies, code patterns, and secrets for security vulnerabilities using documented tooling.

Manages security hooks in Claude Code to block dangerous commands and protect sensitive files via PreToolUse hooks.

Validates EXECUTION_PLAN.md for verification metadata, manual reasons, and testability to ensure compliance and document quality.

Provides a secure storage pattern for sensitive data like tokens and seeds on mobile devices, ensuring data protection through encryption.