Results for “sca”

Scaffolds a new project from a saved template, creating CLAUDE.md, initial memory, and validating foundation requirements.

Designs, reviews, and scales backend systems with detailed blueprints, trade-off analysis, and technology recommendations.

Quick-reference guide for project scaffolding, covering directory structures, template engines, config files, and conventions.

Routes security requests to specialist skills and performs STRIDE/DREAD threat modeling with a quick secret scan.

Performs security scanning, compliance checks, deployment planning, and infrastructure setup, with optional dependency auditing and bundle size analysis.

Run security audits, vulnerability scans, compliance checks, and incident response workflows for application security.

Scaffolds fullstack projects (Next.js, FastAPI, MERN, Django) and analyzes code quality with security and complexity scoring.

Configure and run CodeQL code scanning through GitHub Actions workflows or the standalone CLI for security analysis.

Provides technical leadership frameworks for architecture decisions, engineering team scaling, technology strategy, and technical debt assessment.

Re-scans a project and updates only auto-generated zones in CLAUDE.md and agent files, preserving user customizations.

Design high-level system architecture, create Architecture Decision Records (ADRs), evaluate technology trade-offs, and plan for scalability.

Deploy and manage Docker containers on AWS ECS with Fargate or EC2, including task definitions, services, auto scaling, and troubleshooting.

Scans the projects/ directory and reports the pipeline phase completion status for each Virtual Team project, including validation errors and QA verdicts.

Evaluates a containerized framework for deploying distributed big data workloads, measuring execution time and cloud cost scaling from four to eight nodes.

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.

Implements container security with image scanning, runtime protection, image signing, and security policies using tools like Falco, Trivy, and Notary.

Automates security and compliance checks using OPA policies, Trivy vulnerability scanning, AWS CIS benchmark verification, and Kubernetes remediation scripts.

Scan infrastructure-as-code — Dockerfiles, Compose, Terraform, and GitHub Actions — for security misconfigurations like running as root, world-writable files, unpinned actions, and hardcoded secrets. Pure Claude Code, no signup.

Query, inspect, and manage Redis databases from the command line using redis-cli, covering connection, data operations, scanning, and server diagnostics.

Manages and analyzes Google Cloud Run services using gcloud CLI, covering service discovery, revision traffic splitting, scaling, concurrency tuning, and container diagnostics.

Runs a comprehensive verification pipeline for Django projects including migrations, linting, tests with coverage, security scans, and deployment readiness checks before PRs or releases.

Audit and manage dependencies across multi-language projects by scanning for vulnerabilities, license conflicts, and transitive dependency risks, with safe-upgrade planning.

Curates a set of Ethereum development tools for 2026, including Foundry, Scaffold-ETH 2, abi.ninja, Blockscout MCP, x402 SDKs, RPC providers, and block explorers.

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.

Manage AWS EC2 virtual machines — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation.

Audit environment-variable hygiene and secrets safety across local development and production with practical scanning, drift awareness, and rotation readiness.

Runs a multi-phase verification pipeline including build, type-check, lint, tests, security scan, and diff review to ensure code quality before creating a PR.

Audits Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield, covering CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Scans local repos and AI agent skill folders for security drift, saves trusted baselines, and compares changes after updates to highlight risky new capabilities.

Managed vector database for production AI applications. Fully managed, auto-scaling, with hybrid search (dense + sparse), metadata filtering, and namespaces. Low latency (<100ms p95). Use for production RAG, recommendation systems, or semantic search at scale. Best for serverless, managed infrastructure.

Managed vector database for production AI applications. Fully managed, auto-scaling, with hybrid search (dense + sparse), metadata filtering, and namespaces. Low latency (<100ms p95). Use for production RAG, recommendation systems, or semantic search at scale. Best for serverless, managed infrastructure.

Provides a complete build-to-production pipeline for Ethereum dApps, covering fork mode setup, IPFS deployment, Vercel config, ENS subdomain setup, and a production checklist for Scaffold-ETH 2.

Detect and prevent hardcoded secrets in git repositories using Gitleaks, including pre-commit hooks, CI/CD integration, custom rules, baseline management, and remediation workflows.

Serverless is a billing-and-scaling model, not a badge of modernity.

Performs a full-stack security posture assessment with 0-100 risk scoring, scanning dependencies, code patterns, configuration, and data handling, then produces a prioritized report and routes to specialized skills.

Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, OSSGadget, and pypi-scan.