Security

Operate professional paid advertising across Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, and X. Use for account intake, source-grounded audits, strategy, budget and measurement planning, creative production, experiments, reporting, monitoring, and explicitly approved.

Performs deterministic, LLM-first SEO audits for websites, blog posts, and GitHub repositories, producing prioritized, confidence-labeled fixes.

Audits a design against Dieter Rams' ten principles, scores each with evidence, and produces a verdict with a handoff prompt for new, refined, or redesigned output.

Reverse engineering assistant that exposes Ghidra capabilities over a Unix domain socket for binary analysis, decompilation, and vulnerability research via CLI commands.

Polishes existing motion against the transitions.dev motion-token scale by auditing duration, distance, scale, blur, and easing values and suggesting token-based corrections.

Audits a website against the Forter Agentic Readiness Guide by running 25 weighted rubrics, scoring each guideline, and producing a prioritized fix report.

Provides atomic motion rules, multi-phase scene blueprints, scene transitions, motion-design techniques, and runtime adapters (GSAP, Lottie, Three.js, Anime.js, CSS, WAAPI, TypeGPU) for composing animations with HyperFrames.

Delegates tasks to specialized AI agents running in parallel via the Box0 platform, enabling code review, security checks, research, and documentation.

Audits fuzzy goals into checkable deliverables using Wittgenstein's philosophy of language, ensuring every word does work.

Expert guidance for architecting, developing, and operating SurrealDB 3, covering SurrealQL, multi-model data modeling, vector search, security, deployment, performance tuning, SDK integration, and ecosystem tools.

Reconciles project documentation, agent memory, and rule files against the actual codebase after a development session, ensuring accuracy and consistency across all knowledge layers.

Runs SEO and content marketing workflows with 10 commands covering keyword research, content audits, technical SEO, competitor analysis, and content planning.

Audit X Ads measurement, pixel, conversions API, campaign structure, targeting, creative, budgets, brand safety, and reporting.

Guides securing and deploying the Dify platform in production, covering SSRF protection, code sandboxing, Docker/Kubernetes deployment, monitoring, and recovery.

Maps a codebase into feature-grouped flowcharts, identifies duplicated concerns across features, and proposes a unified architecture with handoff prompts for refactoring.

Turns a local folder into a searchable, maintainable knowledge base for AI agents, handling setup, navigation, content ingestion, querying, and health checks without external databases or RAG systems.

Guides implementation of accessible web interfaces to meet WCAG 2.2 AA, WAI-ARIA 1.2, and WCAG2ICT standards, covering semantic HTML, ARIA patterns, focus management, and automated validation.

Audits Meta Ads measurement, Pixel and Conversions API, attribution, creative, audiences, placements, automation, budgets, account structure, and policy for Facebook and Instagram campaigns.

Scans AI agents, MCP servers, and skills for security vulnerabilities from the command line, detecting prompt injections, tool poisoning, toxic flows, malware payloads, and credential handling issues across 15+ risk categories.

Automates semantic versioning and release workflow for Claude Code plugins, including version increments across multiple manifest files, build verification, git tagging, GitHub releases, and changelog generation.

Install the rpk CLI on macOS, Linux, or Docker, and configure profiles, connection settings, SASL/TLS credentials, and Enterprise licenses for Redpanda clusters.

Audits local content archives and builds a reusable, structured content engineering project with content units, topic maps, and assembly drafts for ongoing reuse.

Audits UX quality of a codebase or validates implementation against design mockups, then fixes issues and commits changes.

Provides a complete workflow for IDA Pro reverse engineering of binaries (PE, ELF, APK, DLL, SO, firmware) using bundled PowerShell scripts to manage the MCP server and open files, then leverages 72 MCP tools for survey, decompilation, cross-references, data-flow tracing, patching, and reporting.

Provides a structured CLI workflow for Android APK reverse engineering, covering decompilation with jadx and apktool, smali modification, repackaging, signing, and Frida dynamic hooking, with optional native .so analysis via IDA or radare2.

Provides a command-line workflow for binary analysis with radare2, covering reconnaissance, disassembly, function analysis, string and import inspection, patching, binary diffing, and r2pipe scripting across PE, ELF, Mach-O, DEX, and WASM formats.

Provides a comprehensive penetration testing toolchain with 20+ security tools (Nmap, Nuclei, SQLMap, FFUF, Hashcat, etc.) exposed via MCP servers for authorized vulnerability scanning, exploitation, and reporting.

Reverse engineers stripped Go and Rust binaries by recovering runtime metadata, symbols, panic strings, and idiomatic decompilation patterns.

Generates task-oriented technical documentation with progressive disclosure for READMEs, API docs, architecture docs, and security reports after reverse engineering, penetration testing, or CTF tasks.