Security

Generate an interactive bash wizard that walks a human through steps only they can perform.

按中国法规（网安法 / PIPL / 等保2.0 / 数据出境 / AI生成内容标识）审计一个 AI 项目的代码仓库，产出每条都带 文件:行 取证、经独立复核、经脚本校验的合规报告。当用户问「这个项目上线合不合规」「调用了 OpenAI/Claude 算不算数据出境」「要不要做 AI…

Fetch, search, and retrieve AWS Security Bulletins (vulnerability advisories and security announcements published by AWS).

Deterministically generates source documents (Markdown) from the FISC "Security Guidelines on Computer Systems for Financial Institutions" (安対基準 / Antai…

Reference architecture knowledge for a bank Core Banking (勘定系) workload on AWS from the Financial Reference Architecture Japan Edition (BLEA for FSI).

Reference architecture for a resilient, event-driven mobile / online banking workload (モバイルバンキング / オンラインバンキング) on AWS, built as three AWS CDK stacks (React…

Reference architecture for building a secure, compliant, and reliable omnichannel contact center (顧客チャネル / Customer Channel) for Japanese financial…

Shared multi-account governance baseline (ガバナンスベース / Governance Base) of the BLEA for FSI (金融リファレンスアーキテクチャ日本版) reference architecture.

Fetch, search, and retrieve Japanese security advisories and vulnerability information from JPCERT/CC and the MyJVN API (IPA's structured advisory service…

Audit, score, and compare repositories containing portable Agent Plugins against the official Agent Plugins specification.

Objectively evaluate a UI/web design against the pols.dev anti-slop design law: detect catalogued slop tells with cited evidence, score 8 weighted axes…

Codex/OpenClaw skill audit: live budget, usage, duplicates, compact descriptions.

Measure Jetson DRAM/NvMap usage and verify before/after memory reclamation with live audit data.

Audit local and OpenClaw skill libraries for privacy theft, credential theft, stealthy exfiltration, unsafe execution chains, deceptive instructions, and…

Use when auditing an authorized website, SaaS, API, AI app, local code path, GitHub repo, staging URL, or owned runtime for security risks, vulnerability…

Searches and explores Burp Suite project files (.burp) from the command line.

Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes.

Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation…

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived…

Scan a project to identify Kafka applications, extract schemas from data models, tag PII fields, generate Terraform for Confluent Schema Registry…

Create an automation that reads a list of public RSS and Atom feeds on a schedule - daily by default - keeps what is new and matches the configured topics…

Use Langfuse for LLM observability and evaluation and look up Langfuse documentation.

Look up CVE vulnerability details by ID via MITRE CVE API with NVD fallback — severity, CVSS score, affected products, and references

Classify IP addresses as internet scanners (benign/malicious) or targeted attackers — filters noise from security alerts