Find the perfect skill
LangChain Enterprise RBAC
Security
Enforce tenant isolation and role-based access across LangChain chains and LangGraph agents with per-request retriever construction and structured audit logs.
Threat Modeling
Security
Disciplined threat modeling for software architectures and APIs. Map assets, apply STRIDE, classify impact, mitigate. All responses in Portuguese.
Backend Application Security
Security
Secures backend applications by addressing OWASP Top 10 vulnerabilities, implementing authentication (JWT, OAuth2) and encryption (bcrypt, TLS), and configuring vulnerability scanning tools (SAST, DAST, SCA). Helps achieve compliance with frameworks like GDPR, HIPAA, PCI-DSS, and SOC2, and includes incident response procedures.
Malware Static Analysis
Security
Perform static analysis and triage of suspicious files without execution. Extract hashes, strings, metadata, PE/ELF headers, URLs, and indicators.
Frontend Security Coder
Security
Expert in secure frontend coding, XSS prevention, CSP implementation, and DOM sanitization. Provides hands-on guidance for client-side security.
Attack Tree Construction
Security
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
Security Review
Security
Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code.
Anti-Reversing Techniques
Security
Understand anti-reversing, obfuscation, and protection techniques for authorized analysis of protected binaries and malware.
Frontend Security Expert
Security
Specialist in secure frontend coding: XSS prevention, output sanitization, CSP, and client-side attack protection.
Abuselpdb Automation via Rube MCP
Security
Automate Abuselpdb operations (IP/domain abuse reporting) via Composio's toolkit through Rube MCP. Helps when you need to programmatically manage abuse reports, check IPs, or automate workflows without manual API calls.
Firebase APK Scanner
Security
Scans Android APKs for Firebase security misconfigurations, including open databases, storage buckets, and exposed functions. For authorized security testing only.
AI Situational Awareness
Security
Detects internal reasoning quality threats like hallucination risk, scope creep, and context degradation using adapted Cooper color codes and OODA loop decision-making. Helps maintain awareness during complex or unfamiliar tasks and before high-stakes outputs.