Marketplace

Design secure authentication flows: OAuth2, OIDC, session management, token rotation, and multi-factor authentication patterns.

Use when adding, upgrading, or auditing third-party packages: judge vulnerabilities, maintenance health, and supply-chain risk before they ship.

Use to adversarially test an LLM app, agent, or tool pipeline for prompt-injection/jailbreak weakness and produce a scored hardening report.

Invoke to audit or tighten an AI agent's tool/MCP permissions: diff granted access against observed usage and recommend a least-privilege allowlist.

Harden APIs against attacks: input validation, output encoding, rate limiting, CORS, CSP, and injection prevention.

Design zero trust network architectures: identity-based perimeters, microsegmentation, and continuous verification.

Use when credentials may be exposed in code, config, logs, or git history: find them, judge real exposure, and drive rotation and cleanup.

Use when auditing a codebase or diff for security defects: map attack surface, hunt OWASP-class bugs, and rate each finding by real exploit path.

Use when designing or changing a feature and you need a STRIDE threat model: map the system, enumerate threats per element, and rank mitigations.

Review cryptographic implementations: algorithm selection, key management, random number generation, and protocol-level flaws.

Design least-privilege IAM policies for AWS, GCP, and Azure: role design, permission boundaries, and access auditing.

Design incident response playbooks: detection triggers, severity classification, containment, eradication, and communication.

Plan and scope penetration tests: attack surface mapping, test methodology selection, and finding documentation.

Audit systems for privacy compliance: data minimization, purpose limitation, consent management, GDPR/CCPA alignment.

Scan codebases for leaked credentials, API keys, and tokens: pattern matching, entropy analysis, and safe remediation.

Audit software supply chain security: SBOM generation, dependency provenance, artifact signing, and CI/CD hardening.