Security

Enterprise SSL VPN attack - vendor fingerprinting, CVE matrix (Cisco, Fortinet, Citrix, Palo Alto, Pulse/Ivanti), default credentials, pre-auth exploit…

xurl X API CLI: install, auth, app choice, shortcuts, raw endpoints.

Entry P1 category router for API security.

CSRF testing playbook.

WebSocket handshake, CSWSH, tooling (wsrepl, ws-harness, Burp), and common flaws.

Create an automation that reads a list of public RSS and Atom feeds on a schedule - daily by default - keeps what is new and matches the configured topics…

Use Langfuse for LLM observability and evaluation and look up Langfuse documentation.

Scan the ClawHunter agent bounty marketplace for opportunities that genuinely match this agent's real capabilities (code, security research, writing) and…

Use Sokosumi with API-key auth, direct agent hires, coworker tasks, job monitoring, and result retrieval from non-interactive agent environments.

Execution-gap audit - cross-references the startup idea backlog against shipped skills, prototypes, and cross-repo PRs, surfacing the top 3 ideas to build…

One-shot Base-token investigation - runs any subset of six onchain-security checks (rug-scan, contract-audit, deployer-trace, holder-concentration, honeypot…

Recap of everything shipped since the last run - cross-repo PRs, security fixes, star deltas, and X traction, synthesized into a digest article and a…

Work effectively inside a local Agent Canvas environment, including local agent-server auth, frontend/backend port discovery, safe workspace hygiene, and…

Read Blink camera and video-doorbell state, list motion clips, and prepare guarded home-security control requests without exposing Blink credentials.

Smart contract security testing and blockchain CTF exploitation.

Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied…

Investigates Google Cloud networking issues by analyzing GCP logs, metrics, and diagnostics.

Designs, deploys, and secures Google Cloud Agent Gateway solutions.

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security…

Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.

Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…

API fuzzing for bug bounty.

HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.

Concurrency exploitation — race conditions, TOCTOU vulnerabilities, and parallel request abuse in web applications.