Security

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

Run comprehensive quality checks on tabular data (CSV/Excel/TSV/JSON), detecting missing values, duplicates, outliers, format issues, and type inconsistencies…

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

Use when PixelLab (Pixel Lab) or Pip skill context is present for setup/auth (PIXELLAB_SECRET, bearer token), MCP/API routing, asset generation, endpoint…

Validates dataset formatting and quality for SageMaker model fine-tuning (SFT, DPO, or RLVR).

Run several long-lived AI coding sessions ("lanes") as one team led by an orchestrator lane.

Periodic evidence-based self-audit of the whole agent system — the orchestrator, its docs/SSOTs, rules, memory, subagents, tools, infra and the work it claims…

Read-only org repo state report.

Repo-local Sage trace, Phoenix, Mythic task-output, and run-log analysis workflow.

Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework.

ASUS router config and hardening: Asuswrt-Merlin, security hardening, encrypted DNS (DoT/DoH), VPN (WireGuard/OpenVPN), guest networks, VLAN/IoT isolation…

Authentication and authorization patterns - JWT, OAuth2, sessions, RBAC, ABAC, passkeys, MFA, identity-aware proxies, and Better Auth.

Kubernetes and Helm in practice: Deployments, Services, probes, resources, autoscaling, disruption budgets, NetworkPolicy, Pod Security Standards, Gateway API…

macOS workstation diagnostics: kernel panics, failing drives, launchd startup audit, wake reasons, TCC denials, APFS snapshots.

Design, diagnose, and study business models from ideas, product websites, or company names.

Evaluates a software repository for readiness to be developed and maintained by AI coding agents, and produces an evidence-based readiness scorecard.

Godot Expert Analyst: Anara.

Godot Expert Auditor: Aurelius.

Brand voice, visual identity, messaging frameworks, asset management, brand consistency.

CI/CD pipeline patterns with GitHub Actions, release automation, and testing strategies.

Cloudflare Workers + Wrangler edge ops: runtime, bindings, local dev, secrets, deploy/CI, Pages-vs-Workers.

GitHub remote operations and README authoring: repo creation, metadata, releases, issue/PR management with preview-before-send, README as a landing page…

Default code-quality route for broad code review, PR review, maintainability, correctness, and regression-risk checks.

Create, edit, audit, and speed up GitHub Actions workflows using Bret Fisher's opinionated DevOps rules.