Security
Security scanning and vulnerability detection
deep-audit
by shantoislamdev
Universal security and robustness scanner for any codebase. Use when auditing code for vulnerabilities, security issues, bugs, or robustness problems. Automatically detects tech stack, creates custom audit plans, and performs recursive deep analysis.
sharp-edges
by aleister1102
"Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration."
security-review
by pmco23
Use after build is complete to scan for OWASP Top 10 vulnerabilities. Checks injection, authentication, authorization, data exposure, and misconfiguration risks. Requires .pipeline/build.complete.
guard-audit
by tonone-ai
Audit guardrail coverage — bypass vectors, false positive rates, policy gap analysis, red-team scenarios. Use when asked to "audit our AI guardrails", "can our filters be bypassed", or "check guardrail false positives".