Probe a target for HTTP methods that should not be enabled in production — TRACE (XST attack), unrestricted PUT/DELETE, DEBUG/CONNECT…
Run the ProdGuard scanner on a repo to catch the security controls an AI coding agent turns off to make something work.
Audit a shipped repo for production-readiness gaps across RLS, webhooks, secrets, grants, Stripe idempotency, mobile UX, and deployment…
Verify that browser profiles are actually isolated from one another instead of assuming it - confirm each profile's timezone agrees with…
Develops comprehensive threat actor profiles for APT groups, criminal
Auditing an EXISTING software project to detect weaknesses, technical debt, and areas for improvement, evaluating it against 4 pillars…
Study, plan, harden, and verify project/workspace features with scoped files, derived knowledge, retention policies, and regression tests.
Comprehensive codebase health analysis. Use when reviewing code quality, identifying technical debt, checking dependencies, or assessing…
Run a critical, multi-dimensional quality review of the project using parallel adversarial agents.
Assist in constructing algorithm correctness proofs
Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity…
Emergency defensive response when the user believes they're under active attack — hacked, compromised, credentials stolen, suspicious…
Apply after completing a task, before declaring done.
Prove a frontend performance change with paired, measured before/after numbers instead of projections.
Expert skill for proxy server implementation, configuration, and traffic interception
You are an expert Rails Pundit policy test developer.
Production-grade Playwright testing toolkit.
Drive PWN::AI::Context from pwn_eval.
Guides the structured engineering workflow for binary vulnerability analysis, debugging, and proof-of-concept stabilization.
Generate synthetic evaluation datasets for the PXI eval harness (evals/pxi/).
Pairwise test generation