Security & Review

One command scans your unpushed change with the right security/secret/dependency/lint scanners plus a separate reviewer that reads every changed line, then prints a verdict and a report path.

Runs 3 vulnerability hunters and 2 PoC engineers in parallel so only findings with a proven, reproducible attack path survive.

An AI/ML-specific security skill that scans for prompt injection and jailbreaks, scores model inversion and data poisoning risk, and maps findings to MITRE ATLAS.

Scans a codebase for hardcoded credentials and blocks repomix packaging until it's clean.

A guided, safety-first workflow to scan for and purge secrets, private domains/IPs and PII from Git history, then force-push safely.

A Bugcrowd-specific reporting overlay: VRT selection, manual severity-override requests, and ready-made out-of-scope rebuttals.

One command that runs the right security, secret, dependency and lint scanners on your pending change and has a separate reviewer re-check every finding before you push.

One command that runs the right security, secret, dependency and lint scanners on your unpushed diff, then has a separate AI reviewer verify every finding before you `git push`.

An expert skill for DORA (Regulation (EU) 2022/2554): article-level gap analysis, ICT incident classification and reporting, third-party risk, and TLPT scoping.

Deep security auditing for git repos, AI skills and MCP servers — 28 scanners covering prompt injection, credential theft, supply-chain IOCs, and actively exploited CVEs.

A playbook for running parallel code reviews across quality dimensions, then deduplicating findings, calibrating severity and producing one consolidated report.

Runs six Article-cited forcing questions to pressure-test an AI system's readiness for the EU market.

An end-to-end malware workflow for static/dynamic analysis, YARA rule authoring, and safe sandbox setup.

Reviews code and diffs against OWASP Top 10:2025, ASVS 5.0, and the 2026 LLM and Agentic Top 10 lists with a disciplined, low-false-positive workflow.

Audits dependency manifests and server configs for known CVEs, scores them with CVSS/EPSS/KEV, and outputs a prioritized remediation report.

A read-only audit of your agent's harness across containment, guides, sensors and permissions that names the worst possible session and ranks hardening fixes outside-in.

Expert guidance for UK Cyber Essentials and CE Plus certification under the current Danzell (v3.3) question set, including gap assessments and scoping.

A privacy-compliance skill that walks through CCPA/CPRA applicability thresholds, consumer-rights workflows, opt-out mechanisms, and GDPR gap analysis.

An expert CIS Controls v8 (Top 18) assistant for Implementation Group scoping, safeguard gap assessments, and NIST/ISO/CMMC crosswalks.

An expert skill that walks teams through EU CSRD/ESRS obligations — scoping, double materiality, gap assessment and disclosure drafting.