4. Security & Compliance

Audits digital content and technology for WCAG and Section 508 accessibility compliance, delivering actionable remediation recommendations.

Plans sterile barrier system validation according to ISO 11607, ensuring medical device packaging meets regulatory requirements.

Automates vendor security assessments through questionnaire generation, response parsing, and risk scoring for compliance management.

Specializes in protocol fuzzing to identify security vulnerabilities and weaknesses in network protocols through automated testing.

Automates OWASP Top 10 vulnerability scanning, detecting injection flaws, authentication issues, and misconfigurations with compliant reporting.

Manages type approval documentation and certification processes to ensure regulatory compliance for product market entry.

Enables integration of offensive security tools and techniques for penetration testing and vulnerability assessment.

Verifies compliance with medical device regulatory standards including ISO 13485, ISO 14971, IEC 62304, and IEC 60601.

Scans and enforces security policies across Infrastructure as Code configurations for Terraform, CloudFormation, Kubernetes, and Pulumi.

Supports functional safety process and analysis to ensure compliance with ISO 26262, the automotive industry safety standard.

Provides guidance on implementing OWASP Top 10 compliance, Content Security Policy (CSP), and XSS prevention for web applications.

Scans and hardens GCP security configurations using Security Command Center, Forseti, and ScoutSuite for vulnerability detection and remediation.

Specialized skill for selecting and designing air pollution control equipment (scrubbers, baghouses, ESPs, oxidizers) to meet regulatory standards like BACT and LAER.

Analyzes Ethereum smart contract bytecode for security vulnerabilities, gas optimization, and reverse engineering, providing insights into opcodes and storage layouts.

Validates attack hypotheses in smart contracts via dedicated commands to identify security vulnerabilities.

Conducts static security analysis and vulnerability review for Solidity smart contracts, ensuring secure deployment and identifying potential risks.

Performs comprehensive security audits on codebases using multiple security-auditor agents, recommended before production deployments or after major features.

Generates Proof of Concept exploits for Solidity smart contract vulnerabilities, triggered by commands like 'weasel poc' or 'weasel exploit'.

Filters false positives from Weasel static analysis security reports, improving accuracy of vulnerability detection.

Generates security audit reports for smart contract vulnerabilities upon trigger phrases like 'weasel report'.

Provides project overview and audit preparation for smart contract security, triggered by specific commands to streamline security assessments.

Provides tools for open source license compatibility analysis, obligation tracking, and compliance workflow management.

Configures and troubleshoots permission rules, tiered access models, and permission modes for Claude Code security controls.

Comprehensive guidance for securing APIs, covering authentication, rate limiting, input validation, CORS, security headers, and OWASP API Top 10 vulnerabilities.