API security patterns — rate limiting, JWT best practices, OAuth2/OIDC flows, CORS configuration, input validation, SQL injection prevention, GraphQL security.
6 production-ready security skills: secret scanning, SAST, prompt-injection testing, HTTP/JWT/dependency auditing. Zero dependencies.
Scans user inputs and prompts for injection attacks and jailbreak attempts in Claude Code sessions
OWASP Top 10 2025 security audit — broken access control, cryptographic failures, injection, insecure design, security misconfiguration, vulnerable components, auth failures.
GDPR, SOC2, HIPAA, PCI-DSS compliance checklists and implementation guides. Data privacy, encryption at rest, audit logging, access control policies.