Security & Review

Takes a proven vulnerability through private vendor reporting, timeline coordination, CVE assignment, and public advisory publication.

A skill that reviews code against quality, security, performance, and maintainability checklists and returns a severity-ranked report.

Guides Claude in designing end-to-end security architectures using defense-in-depth, zero trust, STRIDE/PASTA threat modeling, and NIST CSF / CIS / ISO 27001 control mapping.

A static-analysis skill that applies abstract interpretation to infer variable ranges and flag potential runtime errors — out-of-bounds, null dereference, divide-by-zero, integer overflow — without running the code.

Autonomously scans a codebase for personal data, runs an all-99-article GDPR gap analysis, and generates pre-filled DPA, ROPA and operational compliance documents.

Runs the liarjs CLI to cross-check a browser's JS fingerprint (canvas, WebGL, audio, fonts, WebRTC, timezone) against the TLS/HTTP/ASN view of the same request and scores the contradictions.

Auto-checks forms, schemas, auth flows and APIs for personal-data risks before Claude writes the code, mapped to US privacy regulations.

Reads a liarjs fingerprint report and attributes each failing check to the component that actually produced the signal.