Find the perfect skill
Secure Environment Variable Management
Security
Guidance for managing environment variables securely, preventing secret exposure in sessions, logs, and git.
Homelab VLAN Segmentation
Security
Segment a home network into isolated VLANs for IoT, guests, trusted devices, and servers using UniFi, pfSense/OPNsense, or MikroTik.
DeFi AMM Security
Security
Security checklist and hardened patterns for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, donation attacks, oracle manipulation, and admin controls.
Homelab VLAN Segmentation
Security
Guide to segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik. Covers trunk config, firewall rules, and SSID mapping.
Testing for Broken Access Control
Security
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
Compliance-Ops: Compliance Framework Checker
Security
Check codebases against compliance frameworks (SOC2, GDPR, HIPAA, PCI-DSS). Generates compliance reports with pass/fail status and remediation guidance.
Dependency Vulnerability Scanner
Security
Scan project dependencies for known CVEs, suggest upgrades, and generate security audit reports.
Security Headers Configurator
Security
Configure comprehensive security headers for web applications to prevent common attack vectors.
Cryptographic Application Audit
Security
Systematically reviews an application's cryptographic usage to identify vulnerabilities like weak algorithms, hardcoded keys, and insecure protocols. Builds an automated scanner for Python and config files.
AppExchange Security Review Patterns – FlexibleTeamShare
Security
Salesforce AppExchange Security Review patterns for 2GP managed packages. Real rejection lessons: per-field FLS enforcement, server-side authorization required.
OTTO - LGPD Privacy Guardian
Security
Scans code for LGPD (Brazilian Data Protection Law 13.709/18) violations: exposed personal data (CPF, RG, email, phone), logs containing PII, and tracking without consent. Use when code accesses personal data, implements analytics/tracking, or before commits that alter data collection.
Safety Audit
Security
Audit unsafe Rust code for FFI lifetime violations, memory leaks, undefined behavior, and Vulkan spec compliance.