Claude Code Commands

Walk the receipt chain in ./receipts/ verifying every signature and hash link. Detects insertions, deletions, and tampering across the entire audit trail.

Set up PreToolUse hook to block --no-verify and other git bypass flags in Claude Code projects

Regulatory Compliance Check

Dependency Audit and Security Analysis

Audit project dependencies for vulnerabilities, outdated packages, license conflicts, and supply chain risks — then provide actionable remediation strategies.

Orchestrate comprehensive multi-dimensional code review using specialized review agents across architecture, security, performance, testing, and best practices

Orchestrate multi-agent incident response with modern SRE practices for rapid resolution and learning

Multi-Agent Code Review Orchestration Tool

Multi-Agent Code Review Orchestration Tool

Dependency Vulnerability Scanning

Orchestrate comprehensive security hardening with defense-in-depth strategy across all application layers

Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks

Verify a single Ed25519-signed receipt file. Returns exit 0 if valid, 1 if tampered, 2 if malformed.

XSS Vulnerability Scanner for Frontend Code

Implement secure user authentication system with chosen method and security best practices

When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.

Perform comprehensive analysis of $ARGUMENTS to identify code quality issues, security vulnerabilities, and optimization opportunities.

Comprehensive code quality review with security, performance, and architecture analysis

Containerize application with optimized Docker configuration, security, and multi-stage builds

Audit dependencies for security vulnerabilities, license compliance, and update recommendations

Google Workspace Admin SDK: Manage users, groups, and devices.

Google Workspace Alert Center: Manage Workspace security alerts.

Google Cloud Identity: Manage identity groups and memberships.

Google Model Armor: Filter user-generated content for safety.

Google Model Armor: Sanitize a model response through a Model Armor template.

Google Vault: Manage eDiscovery holds and exports.

Create optimized Next.js middleware with authentication, rate limiting, and routing logic

Perform penetration testing and vulnerability assessment on application

Administer IT — manage users, monitor security, configure Workspace.

Find and review Google Drive files shared outside the organization.

List and review Google Workspace security alerts from Alert Center.

Rollback deployment to previous version with safety checks, database considerations, and monitoring

Scan codebase for exposed secrets, credentials, and sensitive information

Perform comprehensive security assessment and vulnerability analysis

Harden application security configuration with comprehensive security controls

Configure comprehensive Kubernetes deployment with manifests, security, scaling, and production best practices

Implement comprehensive API rate limiting with advanced algorithms and user-specific policies

Conduct comprehensive Supabase security audit with RLS analysis and vulnerability assessment

Audit a project for software supply chain risk, including dependency vulnerabilities, lockfile issues, malicious package indicators, SBOM coverage, and license concerns.

Draft a privacy policy covering data collection, usage, storage, and compliance requirements

Static security audit of AI-built code — map trust boundaries, cross-reference documented intent, self-refute every finding, and report only evidence-backed risks

Score vendors on a multi-dimensional scorecard (reliability / support / security / commercial / strategic-fit), track SLA compliance, classify third-party risk. Direct invocation of the vendor-management skill.