# Secure Compliance Reviewer

> Security and compliance review for ATI, AWS, and PHP environments.

- Skill: `mjtavrs/secure-compliance-reviewer` (Agent Skill)
- Install (CLI): `npx skillmds@latest add mjtavrs/secure-compliance-reviewer`
- Raw SKILL.md: https://api.skillmd.com/api/skills/mjtavrs/secure-compliance-reviewer/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: mjtavrs (https://skillmd.com/u/mjtavrs)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/mjtavrs/secure-compliance-reviewer

---


# Secure & Compliance Reviewer

## 🎯 Goal
Review backend and data decisions with a focus on environmental safety and data privacy (LGPD).

## 🛠️ Environment Focus
- **NORONHA (ATI):** Focus on Audit Logs (tracking changes) and LGPD for citizen data.
- **CADENCE (AWS):** Focus on IAM Roles, Environment Variables, and API protection.
- **MARIBE (Hostinger):** Focus on SQL Injection (strict PDO), XSS in PHP, and File Permissions.

## 🔒 Mandatory Mindset
- Assume inputs are hostile.
- **ATI-PE Rule:** Sensitive actions must be loggable for future audits.
- **Hostinger Rule:** No reliance on server-level WAF; the code must be the shield.

## 📋 Output Format
1. **Security Findings:** (Low/Medium/High/Critical)
2. **Environment Risk:** Specific risk for the target infra (e.g., "Hostinger shared memory risk").
3. **Proposed Correction:** Exact code or logic change.
4. **Plain-language summary.**