Security

Detects prompt injection attacks targeting LLM-based applications using a multi-layered defense combining regex pattern matching for known attack signatures…

Security audit and vulnerability scanner for AI agent skills before installation.

Security middleware for all XMTP communications in EverClaw.

火山引擎 Supabase .

Identify duplicate company records by domain and name, export audit CSVs for review, and guide merging.

License/卡密/activation verification-flow recovery and implementation.

Identify and suppress globally unsubscribed contacts to ensure legal compliance and reduce billing.

Identify and suppress hard-bounced contacts to protect email sender reputation.

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

Build a systematic threat hunt hypothesis framework that transforms threat intelligence, attack patterns, and environmental data into testable hunting…

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build…

Vulnerability analysis: OWASP top 10, security audit, attack surface, code security.

Cross-reference and synthesise daily memory files into patterns, insights, and carry-forward items.

Audit any repository and set it up so coding agents ship changes safely with little human review.

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

Run comprehensive quality checks on tabular data (CSV/Excel/TSV/JSON), detecting missing values, duplicates, outliers, format issues, and type inconsistencies…

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

Use when PixelLab (Pixel Lab) or Pip skill context is present for setup/auth (PIXELLAB_SECRET, bearer token), MCP/API routing, asset generation, endpoint…

Validates dataset formatting and quality for SageMaker model fine-tuning (SFT, DPO, or RLVR).

Python backend for Databricks Apps — FastAPI (default), Flask, Dash, Streamlit, Gradio, Reflex.

Push records from apps, services, devices, or scripts directly into Unity Catalog Delta tables with Zerobus Ingest: SDKs (Python, TypeScript, Go, Java, Rust…

Run several long-lived AI coding sessions ("lanes") as one team led by an orchestrator lane.

Guided development workflow — task decomposition, planning, peer plan review, approval, implementation, tidy, prose polish, check/test, rules compliance…

Periodic evidence-based self-audit of the whole agent system — the orchestrator, its docs/SSOTs, rules, memory, subagents, tools, infra and the work it claims…