Security

Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or…

Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection with agent-browser.

Check secret handling, staged changes and push targets, destructive Git operations, Docker image hygiene, and new dependencies before consequential coding…

Manage Google Security Operations (SecOps) SOAR cases throughout their lifecycle.

Author, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps.

Expert guidance for proactive threat hunting in Google SecOps.

Expert guidance for deep security incident and entity investigations in Google SecOps.

Expert guidance for security alert triage in Google SecOps.

A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via Tencent Zhuque Lab AI-Infra-Guard.

Detect hardcoded secrets in code or configuration accessible to the target agent.

OWASP Top 10 for Agentic Applications 2026 (ASI) classification framework.

Use to extend an existing agent project with memory, app integration, VPC, multi-agent, migration, model, browser, code interpreter, payments, or resource…

Detect data leakage, missing boundaries, or privilege mismatch in inter-agent communication.

Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection…

Use when reviewing WordPress plugins for GPL compliance, checking license headers or compatibility, evaluating upsell/freemium/trialware patterns, validating…

Security guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons.

Django access control and IDOR security review.

GitHub Actions security review for workflow exploitation vulnerabilities.

Finds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump…

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Security code review for vulnerabilities.

Scan agent skills for security issues.

Django performance code review.

Use when doing ANY task involving Supabase.