Security

Use when building a custom UI (page, dashboard, buttons) that should wake the agent over a webhook, when the user must provide a webhook secret, or when…

Read tweets and threads from X (Twitter).

Cloudflare Workers + Wrangler edge ops: runtime, bindings, local dev, secrets, deploy/CI, Pages-vs-Workers.

Reads and edits Google Docs and Drive files through the user-scope google-workspace MCP and repairs its authentication or connection.

Systematically reviews code for SQL injection, XSS, SSRF, broken access control, cryptographic failures, and other common OWASP Top 10 vulnerabilities…

REST API and WebSocket development with FastAPI emphasizing security, performance, and async patterns

Manage your AceDataCloud account through the management API (platform.acedata.cloud).

Publish (with optional images), delete and read your own posts on Bluesky via the AT Protocol (XRPC).

Work with the user's Discord account.

Debug REST, GraphQL, webhook, and OAuth/API-key integrations with layered request, auth, schema, and response checks.

Create, edit, and modernize Dockerfiles, .dockerignore, Docker Bake files, and Compose files using Bret Fisher's strongly opinionated modern Docker + BuildKit…

Authentication and authorization with better-auth in Spiceflow and TypeScript apps.

Cloudflare Workers and Durable Objects conventions for TypeScript projects.

Use when a user needs advice or implementation help for sending one or many emails through Sendmux: choose the HTTP Sending API versus SMTP, design single or…

Secret safety for AWS Secrets Manager, secret management, credentials, API keys, tokens, and passwords.

Publish text, link or photo posts to your Facebook Page via the Facebook Pages API, and read your Page's recent posts.

Harden code where untrusted input enters the system.

Four proven patterns for reliable automation, extracted from an auto-registration stack and generalized: 1) swappable mailbox pool, 2) OAuth device flow…

Post-QA hardening — detects task type (code, docs, research, legal, content, infra) and applies the matching verification checklist before archiving.

Use when adding server-side API routes to an Expo Router app (+api.ts files) for secrets, database access, third-party proxies, webhooks, CORS, or EAS Hosting…

固件 / IoT 渗透链。从拿到一坨 .bin / .img 开始，闭环走完逆向 → 提取 → 模拟 → 利用。 方法论遵循 OWASP FSTM 九阶段；工具链以 binwalk v3、unblob、EMBA、Firmadyne、AFL++ 为主。…

Read-only documentation drift audit comparing what the docs claim against what the code does.

Read-only documentation drift audit comparing what the docs claim against what the code does.

Audit the codebase for performance efficiency, the ISO/IEC 25010 characteristic covering time behavior, resource utilization, and capacity.