4. Security & Compliance

Verifies that git commits address security audit findings without introducing bugs, ensuring remediation aligns with security reports.

Assesses codebase maturity against Trail of Bits' security framework, delivering evidence-based ratings and actionable security recommendations.

Generates Claude Code skills for security testing tools and techniques using the Trail of Bits Testing Handbook.

Performs CodeQL static analysis for security vulnerability detection, taint tracking, and data flow analysis in code audits and CI/CD pipelines.

Enables line-by-line code analysis to establish architectural context for security audits and vulnerability detection.

Analyzes cryptographic code for timing side-channel vulnerabilities across multiple programming languages.

Reads an asset file and executes a script to reveal a hidden secret code.

Manages secure access to credentials and secrets using 1Password CLI, enabling installation, account setup, and safe secret retrieval/injection.

Provides comprehensive security checklist and patterns for authentication, user input handling, secrets management, and sensitive feature implementation.

Configures enterprise SSO, RBAC, and organization management for Clay platform security controls.

Enables PII handling, data retention policies, and GDPR/CCPA compliance for CodeRabbit data integrations.

Analyzes codebase for session security vulnerabilities including insecure session IDs and session fixation attacks.

Verifies encryption at rest implementation for data storage, ensuring compliance with security standards and identifying unencrypted assets.

Configures enterprise SSO, RBAC, and organization management for Windsurf security implementation.

Validates Perplexity webhook signatures and securely handles event notifications to prevent spoofing and ensure integrity.

Automates cryptographic key rotation processes to enhance security and compliance in key management systems.

Enables comprehensive vulnerability scanning for security issues, including CVE detection in code, dependencies, and configurations.

Validates SSL/TLS certificate expiration and integrity for HTTPS websites to ensure secure communications.

Analyzes and audits an organization's attack surface to identify security vulnerabilities and potential entry points.

Automates web application penetration testing, identifying OWASP Top 10 vulnerabilities and providing detailed security flaw reports.

Configures user roles, permissions, and access control policies for Granola enterprise systems using RBAC.

Validates payment systems against PCI-DSS security standards to ensure compliance with payment card data security requirements.

Configures enterprise SSO, role-based access control, and organization management for Fireflies.ai.

Automates web application penetration testing, identifying OWASP Top 10 vulnerabilities and providing detailed security flaw reports.