Find and prove cross-site request forgery in a web application during an authorized assessment.
Route web data visualization work. Use when the user needs chart choice, visual critique, dashboards, maps or geospatial views, Gantt…
Perform deep web research for complex questions that require decomposition, multi-query coverage, evidence ranking, contradiction…
Creates unique web designs with brand identity, color palettes, typography, and modern UI/UX patterns.
Web content fetching via curl and WebFetch when a specific URL is provided.
Use when you need to retrieve content from the web — fetching specific URLs, searching for information, retrieving API documentation…
Find and prove insecure direct object reference / broken object-level authorization (BOLA) in a web application during an authorized…
Imports web content, WeChat articles, and X/Twitter threads into WPS Notes while preserving rich-text formatting and image placement.
Confirm and safely demonstrate OS command injection in a web application during an authorized assessment.
Find and prove path traversal / local file inclusion in a web application during an authorized assessment.
Detect path traversal and local file inclusion attempts and success against a web application from request logs and file-access telemetry.
Executes multi-run Lighthouse performance measurements, compares build benchmarks, and generates offline verified lab reports.
Fix PageSpeed Insights/Lighthouse accessibility "!" errors caused by contrast audit failures (CSS filters, OKLCH/OKLAB, low opacity…
Use for any web work: planning, deciding, designing, scaffolding, naming, reviewing, auditing, or implementing anything in a TypeScript or…
Expert in web scraping and data extraction with Python tools
Web scraping with anti-bot bypass, content extraction, undocumented APIs and poison pill detection.
Real-time web research using Gemini's Google Search.
Web search via Gemini CLI for latest information.
Harden a web application by suppressing stack-leaking response headers and deploying the security header set (CSP, HSTS…
Confirm, characterize, and demonstrate the impact of SQL injection in a web application during an authorized assessment.
Detect SQL injection attempts and successful exploitation against a web application from logs, WAF events, and database telemetry.