Security

Audits and progressively hardens Xcode security build settings for a Capacitor iOS app (ios/App/App.xcodeproj, scheme App) and native plugin code…

Vulnerability analysis: OWASP top 10, security audit, attack surface, code security.

Secure key management for AI agents.

Cross-reference and synthesise daily memory files into patterns, insights, and carry-forward items.

Advanced prompt injection defense system for EverClaw with HiveFence network integration.

Security scanner for AgentSkill packages.

Validates all CI skills in this repo.

MathModel Copilot, an evidence-based mathematical-modeling competition workflow built on mathmodel-skill.

Audit any repository and set it up so coding agents ship changes safely with little human review.

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

Run comprehensive quality checks on tabular data (CSV/Excel/TSV/JSON), detecting missing values, duplicates, outliers, format issues, and type inconsistencies…

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

Use when PixelLab (Pixel Lab) or Pip skill context is present for setup/auth (PIXELLAB_SECRET, bearer token), MCP/API routing, asset generation, endpoint…

Validates dataset formatting and quality for SageMaker model fine-tuning (SFT, DPO, or RLVR).

Python backend for Databricks Apps — FastAPI (default), Flask, Dash, Streamlit, Gradio, Reflex.

Push records from apps, services, devices, or scripts directly into Unity Catalog Delta tables with Zerobus Ingest: SDKs (Python, TypeScript, Go, Java, Rust…

Run several long-lived AI coding sessions ("lanes") as one team led by an orchestrator lane.

Guided development workflow — task decomposition, planning, peer plan review, approval, implementation, tidy, prose polish, check/test, rules compliance…

Periodic evidence-based self-audit of the whole agent system — the orchestrator, its docs/SSOTs, rules, memory, subagents, tools, infra and the work it claims…

Read-only org repo state report.

Repo-local Sage trace, Phoenix, Mythic task-output, and run-log analysis workflow.

Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework.

ASUS router config and hardening: Asuswrt-Merlin, security hardening, encrypted DNS (DoT/DoH), VPN (WireGuard/OpenVPN), guest networks, VLAN/IoT isolation…

Authentication and authorization patterns - JWT, OAuth2, sessions, RBAC, ABAC, passkeys, MFA, identity-aware proxies, and Better Auth.