“security audits”

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Security code review for vulnerabilities.

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces.

Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

Audit a WordPress plugin's REST surface and produce a standardized audit document proposing Abilities API registrations.

Audit an Anthropic Cookbook notebook based on a rubric.

Audit PostHog experiments and feature flags for configuration issues, staleness, and best-practice violations.

Audit the health of a PostHog project's materialized views (saved queries) — find every failed materialization and flag unused or stale materialized views…

Audit every endpoint in a PostHog project for staleness, failed materialisations, and unused materialised versions.

Audit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.

Audits Filestore instances on Google Cloud across projects for disaster recovery readiness (missing or stale backups), security access governance (overly…

Audit the health of a PostHog project's data warehouse sources and syncs — find every broken or degraded source connection, sync schema, and webhook channel.

Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…

GitHub Actions security review for workflow exploitation vulnerabilities.

Redis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via…

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Analyze a repository to generate recommended Claude Code settings.json permissions.

AWS security service suitability, coverage and cost recommendations: WAF/origin overlap, AWS Network Firewall inspection coverage and policy review, VPC…

Audit inbound lead handling and map the customer experience from source event to follow-up outcome.

Audit lead handling quality across GTM systems and identify missed or low-quality follow-up.

Use when doing ANY task involving Supabase.

Audit your LaunchDarkly feature flags to understand the landscape, find stale or launched flags, and assess removal readiness.

Pre-execution security guard for AWS operations.

Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle, rate…