Security & Review

One command scans your unpushed change with the right security/secret/dependency/lint scanners plus a separate reviewer that reads every changed line, then prints a verdict and a report path.

Scans a codebase for hardcoded credentials and blocks repomix packaging until it's clean.

One command that runs the right security, secret, dependency and lint scanners on your pending change and has a separate reviewer re-check every finding before you push.

One command that runs the right security, secret, dependency and lint scanners on your unpushed diff, then has a separate AI reviewer verify every finding before you `git push`.

Deep security auditing for git repos, AI skills and MCP servers — 28 scanners covering prompt injection, credential theft, supply-chain IOCs, and actively exploited CVEs.

A playbook for running parallel code reviews across quality dimensions, then deduplicating findings, calibrating severity and producing one consolidated report.

Reviews code and diffs against OWASP Top 10:2025, ASVS 5.0, and the 2026 LLM and Agentic Top 10 lists with a disciplined, low-false-positive workflow.

Audits dependency manifests and server configs for known CVEs, scores them with CVSS/EPSS/KEV, and outputs a prioritized remediation report.

A read-only audit of your agent's harness across containment, guides, sensors and permissions that names the worst possible session and ranks hardening fixes outside-in.

An expert skill that walks teams through EU CSRD/ESRS obligations — scoping, double materiality, gap assessment and disclosure drafting.

A privacy-compliance skill that walks through CCPA/CPRA applicability thresholds, consumer-rights workflows, opt-out mechanisms, and GDPR gap analysis.

An expert CIS Controls v8 (Top 18) assistant for Implementation Group scoping, safeguard gap assessments, and NIST/ISO/CMMC crosswalks.

Expert guidance for UK Cyber Essentials and CE Plus certification under the current Danzell (v3.3) question set, including gap assessments and scoping.

A read-only auditor that inventories the skills, MCP servers, hooks, plugins and credential files already installed on your machine and reports the risk surface.

Runs a deep security audit across OWASP Top 10, secrets, and dependency CVEs, then writes a dated report with an approval verdict.

A defensive security-audit skill that scans your whole repo for dependency CVEs and risky code patterns, triages them by severity and reachability, then fixes them without suppressing alerts.

Audits a website or mobile app against Vietnamese law on personal data, e-commerce, cybersecurity, advertising and AI transparency, and drafts the matching privacy policy.

Audits a website or mobile app against Vietnamese law on personal data, e-commerce, cybersecurity and advertising, then produces a graded report and policy drafts.

Reviews only a PR's diff against its base branch and reports just the high-confidence, exploitable security issues.

An OWASP-driven security review skill that hardens user input, auth, dependencies, and LLM features with concrete code patterns.