Reviews code for adherence to industry-standard software engineering best practices, identifying potential improvements in design, performance, and maintainability.

🎯

secure-codebase-documentation🎯Skill

Generates comprehensive security documentation for codebases, identifying vulnerabilities, best practices, and compliance requirements across project files.

🎯

insufficient-randomness-anti-pattern🎯Skill

Detects and helps remediate weak randomness vulnerabilities in cryptographic implementations, highlighting potential entropy risks.

🎯

codebase-discovery🎯Skill

Rapidly maps and explores software project structures, dependencies, and architectural patterns across multiple programming languages and frameworks.

🎯

hardcoded-secrets-anti-pattern🎯Skill

Identifies and flags hardcoded credentials, API keys, and sensitive configuration values in source code to prevent security vulnerabilities.

🎯

command-injection-anti-pattern🎯Skill

Detects and prevents command injection vulnerabilities by analyzing input sanitization, escaping, and safe command execution patterns in code.

🎯

missing-authentication-anti-pattern🎯Skill

Identifies and flags security vulnerabilities where authentication mechanisms are improperly implemented or entirely absent in application endpoints.

🎯

insecure-temp-files-anti-pattern🎯Skill

Detects and prevents insecure temporary file handling vulnerabilities in code, highlighting risky file creation patterns and suggesting secure alternatives.

🎯

authentication-security-pattern🎯Skill

Implements robust authentication flows with secure token management, multi-factor validation, and best practices for preventing common security vulnerabilities