“Security scanning”

Python backend code review + security audit.

Scan the repository for committed secrets and sensitive data; `--diff [<base>]` scopes to a branch's changes.

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

Automated vulnerability scanner for agent platforms.

Maintainer-only workflow for handling GitHub Secret Scanning alerts on Enclawed.

Cloud posture security across AWS, Azure, and GCP — IAM least privilege, public exposure, encryption, logging coverage, landing-zone guardrails.

DevSecOps practices including secrets management, SSL/TLS, vulnerability scanning, and compliance

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions…

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces.

Multi-agent source security audit with a coverage ledger, independently verified findings, and machine-checked records.

Security assessment and intelligence — network reconnaissance, web app security testing, prompt injection testing, security news monitoring, and annual report…

Scan OpenClaw skill folders for security red flags before installing or publishing.

Defensive game security and cheat research covering external and internal cheat architecture, trainers, memory tampering, ESP/overlay, aim automation…

Run Semgrep static analysis scan on a codebase using parallel subagents.

Audits and progressively hardens Xcode security build settings for a Capacitor iOS app (ios/App/App.xcodeproj, scheme App) and native plugin code…

Scan Linux systems for persistence mechanisms including crontab/systemd entries, LD_PRELOAD injection, shell profile modifications (.bashrc, .profile), and…

Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection.

Rewrites the seed prompt as a professional security inquiry — assigns a credible role (security researcher, red-team analyst, compliance officer) and includes…

Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and more.

Scan wallet for token approvals and detect risky unlimited allowances.

Scan a project to identify Kafka applications, extract schemas from data models, tag PII fields, generate Terraform for Confluent Schema Registry…

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing.

Unit-level security judgment of a repository, a folder of repositories, or the units a pull request changed, with TypeSafe's Jev: code splits every source…

Scan project dependencies for vulnerabilities, license issues, and upgrade opportunities across Python, Node.js, Go, and Rust.