4. Security & Compliance

Specializes in securing Electron desktop applications against XSS, code injection, and process isolation vulnerabilities using CSP, IPC protection, and sandboxing.

Automates code signing and notarization for Electron applications across macOS, Windows, and Linux to ensure security compliance and user trust.

Enforces strict environment separation for dev, staging, and production, preventing secret leakage and ensuring least privilege access controls.

Provides API rate limiting best practices for server-side protection and client-side 429 handling, including algorithm selection and implementation guidance.

Provides expert patterns for NextAuth.js v5 authentication setup, including OAuth 2.0 integration, session security, and type-safe session management.

Systematizes security design for MCP tool and API integrations, supporting threat modeling, control design, and configuration validation to ensure secure operations.

Manages Railway platform secrets via environment variables, rotation, and access control for secure deployment configurations.

Provides security hardening for GitHub Actions workflows, enforcing least privilege, secret protection, and supply chain attack prevention.

Assists in designing and implementing security scanning within CI/CD pipelines for dependency vulnerabilities, container images, SBOM generation, and secret detection.

Provides authentication, authorization, micro-segmentation, and continuous validation for Zero Trust security architecture implementation.

Prevents path traversal and symbolic link attacks in file monitoring systems using least privilege access and multi-layer defense architecture.

Systematizes security report generation including threat analysis, vulnerability assessment, and risk scoring using OWASP and CVSS standards for professional security documentation.

Systematizes dependency vulnerability scanning, CVE evaluation, and security audit report generation to support SCA operations and remediation planning.

Systematizes tool permission requirements, policy design, and audit operations to enforce least privilege and ensure secure access management.

Assists in SAST implementation, vulnerability detection (SQLi/XSS), and security rule design for secure code development.

Provides comprehensive input validation and sanitization to prevent XSS, SQL injection, command injection, and path traversal attacks from untrusted inputs.

Compares authentication methods (API Key, JWT, OAuth 2.0, mTLS) and designs secure implementations with token management and security strategies.

Performs a security audit on the OpenHands-Tab VS Code extension, focusing on secret handling, webview boundaries, persistence, and logging redaction.

Provides design guidelines and security measures to prevent prompt injection attacks in AI systems, including input validation and context separation.

Prevents secret leakage by scanning commits via git-secrets/gitleaks integration, implementing OWASP-based detection patterns for pre-commit security checks.

Assists in designing secure command execution by enforcing tool restrictions, disabling unsafe model invocations, and protecting secrets, aligned with security frameworks.

Provides best practices for cryptographic key lifecycle management including generation, rotation, revocation, and backup, aligned with NIST and AWS KMS standards.

Systematizes dependency vulnerability detection, CVSS severity scoring, and remediation prioritization for continuous security auditing and CI/CD integration.

Provides secure secret management for GitHub Actions workflows, including type-specific secrets, OIDC cloud authentication, rotation, and access auditing.