“security audits”

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more.

Deep, multi-agent security audit of a codebase — WordPress plugin, Laravel, Next.js, Node/Express, Django/Rails, or any app.

Perform an explicitly requested local or offline source security audit when a hosted scanner is unavailable or a portable audit is requested; preserve…

OWASP-grounded code security reviews and offensive audits with exploit proof.

Audits a third-party or freshly cloned repo before install or run for install hooks, auto-run files, CVEs, typosquats, and malicious code, graded A-F with a…

Autonomous multi-chain Web3 protocol security audit skill (EVM/Solidity, Solana/Rust, Sui/Aptos Move, ZK/Circom).

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance, and finding tracking.

Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting.

Run the pre-publish security audit for every publishable @tetherto/mdk-* package (or any non-private package in an npm monorepo).

Comprehensive security audit, hardening, and automated penetration testing suite.

Security audit and hardening for Clawdbot/Moltbot installations.

Audit, update, and secure project dependencies across npm, pnpm, Yarn, pip, Pipenv, Poetry, uv, Go, Cargo, Bundler, Composer, NuGet, Maven, Gradle, Swift…

Security audit engine for OpenClaw configurations.

Comprehensive OWASP-aligned security guidance across six standards - Top 10 (2021) for web apps, ASVS 5.0, MASVS v2.1.0 for mobile, API Security Top 10…

Audit exact npm dependency versions against OSV through Runx native HTTP and emit replay-verified evidence with no unverified findings.

Audits and progressively hardens Xcode security build settings for a Capacitor iOS app (ios/App/App.xcodeproj, scheme App) and native plugin code…

Project health audit with deterministic scoring.

Audits a test suite, or a named part, for low-value tests and marks each retain, fix, consolidate, or delete with verified removal evidence.

Audit installed skills for observed usage, explicit-only invocation controls, duplicate discovery, and global-versus-project scope.

Audit websites and GitHub repositories with version-locked UX, accessibility, HIG, motion, and performance skills.

Security review and safe-op patterns.

Handle a security incident through the NIST SP 800-61 lifecycle — validate and scope the signal, build a timestamped fact timeline, classify severity, plan…

Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge.