Security

Perform QA testing on running web applications using cmux_browser.

Use this skill when building PHP applications without a framework — PSR standards, routing, middleware, database access, error handling, and security.

Use when accessing Alchemy APIs for RPC calls, token balances, NFT metadata, asset transfers, transaction simulation, or Alchemy-specific features.

Swoole-specific Docker patterns and house rules.

Deploys runner-modal GitHub Actions self-hosted runner pools on Modal Sandboxes.

Clone, create, fork, configure, and manage GitHub repositories.

AWS/GCP cloud infrastructure: Well-Architected, security, cost, observability.

Integrates and debugs third-party REST and GraphQL APIs: auth, rate limits, pagination, webhooks, with reference for 147 services.

iOS App Store 上线前完整发布审计。逐项核验权限文案、托管 EULA/条款 URL 及违禁内容条款、硬编码价格、.lproj 本地化完整性、App 图标、版本号与 build 号、数据层强制解包、零编译警告、多语言商店元数据，并产出微信/X/Reddit 上线文案。触发词：iOS…

Pre-install check that a package NAME exists and isn't a typosquat, plus intake vetting for third-party agent config (skills, MCP entries, hooks).

Use when a project needs Apify-powered web, social, SERP, marketplace, or competitor research with credential, compliance, and dataset controls.

Paranoid red-team analyst for large language models — scans applications that call large language models for findings from the OWASP Top 10 for Large Language…

Deploy and manage DSG ONE / ProofGate control plane infrastructure on AWS using CDK.

Core Azure DevOps CLI operations for authentication, configuration, projects, teams, users, security groups, permissions, service endpoints, wikis, and…

论文诚信审计——对一篇论文（外部 PDF/DOI/arXiv 或本地写作产出）做图像误用、数值异常、逻辑缺口三轨证据审计，产出 Level 1–4 分级、可复核的 audit_report.md。用于投稿前自查、审稿前评估、对 AI 生成内容做"数字有没有来源、图表有没有被动过"级核验。触发：integrity…

Tailscale REST API v2 (api.tailscale.com/api/v2) — devices, keys, ACL, DNS, webhooks, OAuth scopes.

Deploy, configure, and scale serverless workers, static applications, and integrations on Cloudflare.

Full-stack backend architecture and frontend-backend integration guide.

Implement authentication correctly — session/JWT/OAuth/SSC flows, password handling, MFA, and the failure modes that become breaches.

Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every pull request gets a diff-scoped AI pentest that blocks…

Backend and infra for a project via Cohesivity (cohesivity.ai).

Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — triage by severity, patch the root cause rather than the…

REQUIRED when diagnosing, troubleshooting, or debugging Pi Coding Agent (`pi`) issues, including provider errors, model catalog refresh failures, HTTP 403/401…

Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions.