Security

Build Uniswap v4 hooks with security-first guidance on threat modeling, permission flags, NoOp attack prevention, delta accounting, and pre-deployment audit checklists.

Creates temporary encrypted one-time handoffs between autonomous agents, supporting mission briefs, scoped secrets, artifacts, and receipts via CLI or API.

Audits EVM smart contracts across 19 domains using parallel specialist agents, synthesizes findings, and files GitHub issues.

Audits trending open-source repos for exploitable vulnerabilities using Semgrep, TruffleHog, osv-scanner, and Slither, then routes findings to responsible disclosure channels (PVR for code flaws, public PRs for dependency CVEs).

Create and manage Ethereum wallets, including EOAs, smart contract wallets, Safe multisig, EIP-7702, and account abstraction, with AI agent key safety rules and transaction approval thresholds.

Audit Solidity smart contracts for reentrancy, oracle manipulation, token decimals, SafeERC20, ERC-4626 inflation, infinite approvals, and MEV vulnerabilities with a pre-deployment checklist.

Monitors EVM blockchain addresses and contracts for large transfers, new approvals, contract upgrades, unusual gas spends, MEV interactions, and first-time interactions with new contracts.

Configure wallet signing providers for OpenSea transactions, supporting Privy, Turnkey, Fireblocks, Bankr, and local private keys.

Audit installed SKILL.md files and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and obfuscation. Integrates with Bankr Safety Scores and produces delta reports against prior scans.

Detects fake reviews, Sybil rings, rating manipulation, and reputation laundering in ERC-8004 agent ratings across 20+ blockchains using the TrustLayer API.

Perform forensic on-chain analysis of EVM tokens to detect scams, rug pulls, and soft rugs by cross-referencing on-chain state against team narratives.

Evaluates Base ERC-20 tokens by contract address, returning a 0-100 score across five criteria, launch protocol classification, security flags, and a narrative interpretation.

Automate Wiz cloud security operations through Composio's Wiz toolkit via Rube MCP.

Automates Auth0 identity management tasks through Composio's Auth0 toolkit via Rube MCP, including user management, connection setup, and tool execution.

Automate Rkvst operations through Composio's Rkvst toolkit via Rube MCP, with dynamic tool discovery and connection management.

Automate NextDNS operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.

Automate Paradym identity verification workflows through Composio's toolkit via Rube MCP, with dynamic tool discovery and connection management.

Automate Digicert certificate operations through Composio's Digicert toolkit via Rube MCP.

Automate IP2Proxy operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.

Automates IP WHOIS lookups and domain ownership research via the Ip2whois API through Rube MCP and Composio.

Automate LastPass operations through Composio's Lastpass toolkit via Rube MCP, including credential management and secure access workflows.

Automate Abuselpdb abuse-reporting operations through Rube MCP and Composio's toolkit.

Automate Bitwarden password management operations through Composio's Bitwarden toolkit via Rube MCP.

Automate Control D DNS filtering operations through Composio's toolkit via Rube MCP, with dynamic tool discovery and connection management.

Automate DNS filtering operations through Composio's Dnsfilter toolkit via Rube MCP, including tool discovery, connection management, and execution.

Automate Jumpcloud identity and access management operations through Composio's Jumpcloud toolkit via Rube MCP.

Automate VirusTotal threat intelligence operations through Composio's toolkit via Rube MCP, including file scanning, URL analysis, and report retrieval.

Automate Fraudlabs Pro fraud detection operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.

Automate Identitycheck identity verification tasks through Composio's toolkit via Rube MCP, with dynamic tool discovery and connection management.

Automate Securitytrails domain intelligence and reconnaissance operations through Composio's toolkit via Rube MCP.

Automate Doppler Secretops operations through Composio's toolkit via Rube MCP, including tool discovery, connection management, and execution.

Automate SSL certificate monitoring and analysis using the Sslmate Cert Spotter API through Rube MCP and Composio.

Launches four parallel read-only sub-agents to review a git diff or file scope for regressions, security risks, performance issues, and contract gaps, then aggregates findings into a prioritized fix path.

Analyze a project's past sessions, memory files, and existing local skills to recommend the highest-value skills to create or update.

Diagnose and fix SwiftUI performance issues like slow rendering, janky scrolling, and high CPU/memory usage through code review and profiling guidance.

Prepare ISO 13485:2016 certification documentation for medical device Quality Management Systems, including gap analysis, template-based document creation, and compliance checklists.