Security for Claude Code

Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, journal entries, or any sensitive information. Activates for audit logging, data access, security events, and compliance questions.

Add rate limiting to API endpoints

Generate a lightweight repository risk receipt before AI-agent edits

Audits and implements AI safety layers including content filtering, PII detection, bias mitigation, and LLM guardrails. Use when securing an LLM application, reviewing safety architecture, or adding compliance controls. Trigger with \"audit ai safety\", \"add safety guardrails\".

Comprehensive security audit for REST and GraphQL APIs

DESCRIPTION_PLACEHOLDER

Implement database audit logging

Generate comprehensive security audit report

> Generate authentication boilerplate with JWT, OAuth, and session support

> Generate authentication boilerplate with JWT, OAuth, and session support

Create automated database backup scripts and schedules

Design a backup strategy with schedules, retention, storage tiers, and recovery.

Run compliance gap analyses for SOC2, GDPR, HIPAA, and ISO 27001, then produce stage-appropriate remediation plans and policy drafts. Use when preparing for a compliance audit or framework adoption. Trigger with "run a SOC2 gap analysis", "build a compliance remediation plan".

Design MITRE ATT&CK-mapped detection rules, CIS-benchmarked hardening playbooks, and SOC triage procedures to reduce attacker dwell time. Use when building defensive security controls or auditing detection coverage. Trigger with "design detection rules", "write a hardening playbook".

Monitor cross-chain bridge activity, analyze security models, detect exploits, and compare route fees across Wormhole, Stargate, Hop, and canonical L2 bridges. Use when tracking a pending bridge transfer, assessing TVL risk, or investigating unusual bridge behavior. Trigger with \"monitor bridge\", \"analyze bridge security\".

> Build comprehensive API authentication and authorization system

Secures the software supply chain via SBOM generation, dependency scanning, and license compliance. Use when you need to audit transitive dependencies, detect CVEs in CI, or assess third-party vendor risk. Trigger with \"scan my dependencies\", \"generate an SBOM\".

Check dependencies for vulnerabilities and outdated packages

DESCRIPTION_PLACEHOLDER

DESCRIPTION_PLACEHOLDER

Check infrastructure compliance (SOC2, HIPAA, PCI-DSS)

Regulatory compliance specialist that assesses HIPAA, PCI DSS, GDPR, and SOC 2 gaps, produces framework-specific remediation roadmaps with regulation citations and cost estimates. Use when you need a compliance assessment, audit prep, or gap analysis. Trigger with \"compliance check\", \"HIPAA gap analysis\".

> Generates compliance documentation for HIPAA, GDPR, PCI DSS, and SOC 2

Use when a change touches PII, regulated data, consent, retention, or audit-trail requirements (GDPR/CCPA/HIPAA/PCI) — verifies regulatory posture against the security and docs persona standards. Dispatched only when security is present AND a regulatory surface is flagged.

Scan containers for vulnerabilities using Trivy, Snyk, and other security tools

> Create secure webhook endpoints with validation and resilience

> Reviews cryptographic implementations for security vulnerabilities

Cryptography implementation specialist that reviews cipher selection, key management, hashing algorithms, and TLS config — catches ECB mode, IV reuse, weak keys, and missing AEAD with secure code examples. Use when you need crypto guidance or a cryptographic code review. Trigger with \"review my crypto\", \"how should I encrypt this\".

DESCRIPTION_PLACEHOLDER

> Scans Docker containers and images for security vulnerabilities

Analyzes Dockerfiles and produces optimized multi-stage builds, .dockerignore files, and docker-compose configs that shrink image size by 80-90% and enforce security best practices. Use when optimizing container builds or starting a new Dockerfile. Trigger with \"optimize my dockerfile\", \"reduce docker image size\".

Plan and implement disaster recovery procedures

DESCRIPTION_PLACEHOLDER

Manage environment configurations and secrets across deployments

Explore blockchain transactions, addresses, and contracts

Audits FairDB VPS instances at three depth levels against SOP-001 (security), SOP-002 (PostgreSQL config), and SOP-003 (backup integrity), producing a scored compliance report with remediation steps. Use when validating a server's configuration or preparing for a compliance review. Trigger with "audit this FairDB server", "run a compliance check".

Configure pgBackRest with Wasabi S3 for automated PostgreSQL backups

DESCRIPTION_PLACEHOLDER