4. Security & Compliance

Conducts security audits, vulnerability assessments, and OWASP compliance reviews to identify and report security risks in code.

Audits package dependencies for security vulnerabilities, outdated versions, and license compliance to ensure safe and legally compliant software releases.

Validates input security by testing special characters and injection patterns to prevent vulnerabilities.

Securely resolves file references, preventing path traversal and ensuring safe access to supporting files.

Conducts security audits on Cardano smart contracts, identifying vulnerabilities like redirect attacks and integer overflow before deployment.

Guides users in selecting the appropriate Azure role for least privilege access, ensuring minimal permissions required for desired tasks.

Proactively identifies security threats, vulnerabilities, and suspicious patterns in applications and infrastructure to prevent breaches and enhance security posture.

Provides security patterns to mitigate OWASP Top 10 vulnerabilities including XSS, CSRF, and SQL injection in application development.

Guides developers in implementing secure coding practices to prevent vulnerabilities and safeguard user data throughout the development lifecycle.

Evaluates Agent Skill design quality against official specifications, providing multi-dimensional scoring and actionable improvement suggestions for SKILL.md files.

Provides essential security practices for sensitive code, covering secrets management, input validation, SSRF prevention, and production hardening.

Reviews API security against OWASP Top 10 and Rust best practices, detecting vulnerabilities in authentication, authorization, and code audits.

Exploits parser discrepancies between Coraza WAF (Go) and Next.js 16 backend (Node.js) to bypass web application firewall protections.

Analyzes compiled binaries (JARs, DLLs) to compare versions, identify security fixes, and evaluate patch content for vulnerability assessment.

Automates solving cybersecurity Capture The Flag challenges by analyzing code and environments to extract flags.

Scans code for exposed secrets like API keys and passwords to prevent accidental commits to version control.

Provides security best practices for React Native, including authentication implementation and code hardening.

Enables security reviews, authentication implementation, and code hardening for secure application development.

Provides security utilities for React applications, including authentication implementation and code hardening.

Provides security review, authentication implementation, and code hardening for Flutter applications.

Enforces security and isolation rules to prevent data leakage between tenants in multitenant applications.

Provides security review and hardening utilities for Symfony applications, emphasizing authentication and GDPR compliance.

Provides security utilities for Flutter applications, including authentication implementation and code hardening.

Provides security review, authentication implementation, and code hardening for Symfony applications in compliance with GDPR.