Security

Organize and maintain package.json and pnpm config: scripts layout and separators, multi-process/multi-environment dev commands, serve/dev script tweaks…

GitHub Actions workflow best practices and pitfalls reference.

Use for authorized security assessment of LLM applications and AI agents, including prompt injection, tool abuse, RAG exposure, memory poisoning, and model…

Use for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and…

Stripe, RevenueCat, subscription billing, webhooks, PCI compliance, and tax.

Debugs REST and GraphQL APIs: unexpected status codes or bodies, auth failures (401/403, OAuth, API keys), schema mismatches, rate limits, pagination, and…

Core Web Vitals Reference — LCP, INP, CLS thresholds, root causes, optimization fixes, CrUX BigQuery queries, web-vitals library usage, and SEO impact

Capture a full DevTools-protocol trace of a locally driven browser automation - CDP firehose, screenshots, and DOM dumps - then bisect the stream into…

Stealth Firefox browser server for agent-driven Google OAuth and bot-protected sites.

Comprehensive API validation covering functional, performance, and security testing with automation frameworks and CI/CD integration.

Deploy, protect, debug, and verify a private Cloudflare Workers site for an exact user or email allowlist.

MANDATORY deploy after every code change.

Retrieve a secret through the platform abstraction instead of calling Key Vault directly.

Information security expertise for cybersecurity frameworks (NIST, ISO 27001), security architecture, incident response, vulnerability management, identity…

Operator wishlist checklist seeded at /dr-prd or /dr-plan; verified at /dr-qa and /dr-compliance with BLOCKED routing on missed/partial without override.

Set up and optimize a complete local AI infrastructure — Ollama, Open WebUI, local RAG pipelines, and private model serving.

Common autotel mistakes and how to fix them.

Throws and parses errors that explain themselves with message, why, fix, link, and status, including reusable catalogs via defineErrorCatalog.

Troubleshoot when expected OpenTelemetry spans don't reach the backend.

Use when the user asks to deploy, install, reinstall, redeploy, upgrade, or connect to the CDF Orchestration Airflow controller.

Create a live React canvas beside chat for standalone analytical artifacts that benefit from visual layout: quantitative/security/ architecture analyses…

Send Telegram Bot notifications for development events, CI/CD pipeline status, and AGENTS.md progress updates.

No description from the publisher yet.

Chief Security Officer mode.