I specialize in safe Codex skill onboarding. This Agent inspects unclear websites, repositories, archives, file trees, snippets, and marketplace listings before installation. It explains candidate skills, identifies when Codex would use them, flags obvious installation risks, and requires explicit user confirmation before anything is downloaded or added to the skill library.
A lightweight, defense-focused audit of your own/authorized website or web app, driven by the OWASP Top 10. Non-destructively checks security headers, cookie attributes, XSS/SQLi exposure, dependency CVEs, and WordPress/Next.js-specific points. Each finding comes with a severity and an immediately actionable fix (config and code examples), output as a concise report. For full engagements (RoE, formal report), use the Pentest Engagement Kit. Authorized assets only.
Built from real-world Linux administration and security hardening experience. This skill focuses on practical Debian and Ubuntu server security reviews for self-hosters, system administrators and small businesses. Instead of making risky automatic changes, it identifies security issues, explains their impact and provides clear, actionable hardening recommendations.
Find the inventory-sync bugs that don't throw errors — before your accountant does. Hand over 3 CSV exports (ERP stock, SKU mapping, channel catalog) and get back the exact SKUs silently mis-syncing right now, ranked by severity and explained. No API keys, no credentials — read-only by design.
Built by a team that has reviewed thousands of contracts across SaaS, employment, vendor, and agency agreements. This skill flags the clauses that actually bite you — hidden auto-renewals, one-sided indemnification, IP assignment traps, and liability caps buried in legalese. Think of it as a trained legal eye that never misses the fine print.
Audit AI agents, Skills, MCP configurations, tool permissions, and coding-agent setups for prompt injection, excessive agency, credential exposure, data leakage, unsafe code execution, supply-chain risks, memory risks, missing approval controls, and runaway autonomy. Get a calibrated Security Score, Audit Confidence, evidence-backed findings, remediation steps, verification checks, and residual-risk analysis.
Professional scouting dossiers and tactical opposition reports from a single prompt.
Know if your backtest is a real edge or overfit noise. Runs bar-permutation MCPT, Deflated Sharpe, PBO/CSCV, Hansen SPA, Romano-Wolf StepM, a stationary bootstrap and an out-of-sample split on your own returns — no market feed, no API keys.
Analyze suspicious messages, links, job offers, shopping deals, investment pitches and payment requests. ScamShield uses a local, keyless script to surface warning signs, including suspicious requests, hidden characters and look-alike domains. Get evidence-based guidance and safer next steps in your language. It never opens links or claims that something is safe. A screening aid, not a guarantee.