Audit AI agent workspaces for authority, secrets, data flow, memory, supply-chain, and evidence risks—locally and without executing target code.
Audit AI agents, Skills, MCP configurations, tool permissions, and coding-agent setups for prompt injection, excessive agency, credential exposure, data leakage, unsafe code execution, supply-chain risks, memory risks, missing approval controls, and runaway autonomy. Get a calibrated Security Score, Audit Confidence, evidence-backed findings, remediation steps, verification checks, and residual-risk analysis.
Interactive 6-phase consultant generating production-ready webtoon character model sheets optimized for Nano Banana Pro 2.
This Skill is built on practical expertise in AI agent safety, prompt-injection defense, source-to-sink privacy review, tool and MCP metadata integrity, memory provenance checks, autonomous action scoping, and evidence-based verification. It helps agents separate instructions from evidence before tool calls, uploads, publishing, deletion, code execution, or network output.
Paste your CLAUDE.md or AGENTS.md and tell it what your agent actually did wrong. It names the rule that failed, quotes the line that should have caught it or says plainly that nothing in your file covers it, and hands you replacement text you can paste back. Built from logged incidents on a production pipeline run with a coding agent, not from general advice. With no incident it still reports what your file itself shows. It makes failures visible; it does not promise they stop.
Interactive step-by-step consultant generating consistent 3-view character reference sheet prompts for Midjourney.
Hand work to subagents and get back results you can actually act on. A subagent that fails will often produce a plausible answer anyway - URLs that 404, numbers nobody checked, all reading as confidently as a correct report. This covers what delegates well and what quietly does not, the five things a brief needs before the output is usable, why asking for the dead ends tells you how carefully the work was done, and what to re-verify by hand before acting.
Connect Cursor, Claude Code, Hermes & Codex with a shared local SQLite brain. Slash token costs by 92.2% with instant, zero-amnesia cross-agent recall. 100% private, BYOK, lifetime buyout.
Connect any MCP-compatible AI agent (Claude, Cursor, Copilot, Codex, Windsurf, Amp, Cline) to Penpot to create, audit, and maintain design systems — tokens, flows, interactions, animations, and design-to-code export to HTML/CSS/React.