Search Results

Expert code review specialist. Reviews code for quality, security, and maintainability. Should be used for all code changes.

PostgreSQL database specialist for query optimization, schema design, security, and performance. Incorporates Supabase best practices and Row Level Security patterns.

Expert Java and Spring Boot code reviewer specializing in layered architecture, JPA patterns, security, and concurrency.

Expert Python code reviewer specializing in PEP 8 compliance, Pythonic idioms, type hints, security, and performance.

Security vulnerability detection and remediation specialist. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10 vulnerabilities in code that handles user input, authentication, API endpoints, or sensitive data.

Expert TypeScript/JavaScript code reviewer specializing in type safety, async correctness, Node/web security, and idiomatic patterns.

Operate long-lived agent workloads with observability, security boundaries, and lifecycle management patterns for enterprise deployments.

Scans agent harness configurations for security vulnerabilities, misconfigurations, injection risks, secrets leaks, and permission escalation vectors.

Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.

Atlassian Administrator for managing and organizing Atlassian products (Jira, Confluence, Bitbucket, Trello), users, permissions, security, integrations, system configuration, and org-wide governance. Use when asked to add users to Jira, change Confluence permissions, configure access control, update admin settings, manage Atlassian groups, set up SSO, install marketplace apps, review security policies, or handle any org-wide Atlassian administration task.

Strategic CISO advisory on security program design, risk frameworks, incident response planning, compliance posture, vendor security assessment, and board reporting.

Django security best practices: authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment.

Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks.

Docker and Docker Compose patterns: multi-service orchestration for local development, bind mounts with anonymous volume isolation, container networking, multi-stage Dockerfile optimization, container security hardening, and volume backup strategies.

Library-agnostic Flutter/Dart code review checklist: widget best practices, state management patterns across BLoC/Riverpod/Provider/GetX, Dart idioms, performance optimization, accessibility, security, and clean architecture.

Laravel security: authentication, authorization, validation, CSRF, mass assignment protection, file upload security, secrets, and rate limiting.

Verification loop for Laravel: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.

Perl security: taint mode, input validation, safe process execution, DBI parameterized queries, XSS/SQLi/CSRF prevention, and perlcritic policies.

PostgreSQL quick reference: B-tree/GIN/BRIN index selection, data type cheat sheet, Row Level Security patterns, connection pooling, and Supabase-specific best practices.

OWASP Top 10 security checklist with code patterns for secrets management, input validation, SQL injection prevention, XSS, CSRF, rate limiting, and pre-deployment security verification.

Spring Security: authentication, authorization, validation, CSRF, secrets management, security headers, rate limiting, and dependency security.

Verification loop for Spring Boot: build, static analysis, tests with coverage, security scans, and diff review before release.

Pre-PR verification pipeline: sequential build check, type check, lint, test with coverage, security scan, and diff review. Hard stop on build failure. Report all type errors before proceeding.

Attack tests, property-based invariants, and security boundary tests for enforcement systems.

Enterprise agent observability and security boundaries

Auth, CSRF, SQL injection, XSS prevention

Migrations, lint, tests, security scans

Multi-service orchestration and container security

Auth, validation, CSRF, mass assignment

Lint, static analysis, coverage, security

OWASP Top 10 checklist with code patterns for web security

Taint mode, DBI, perlcritic

Spring Security, CSRF, headers, rate limiting

Build, analysis, coverage, security scans

Pre-PR build/lint/test/security pipeline