Segurança

OWASP-aligned security assessments with vulnerability analysis and remediation

Security-focused code review identifying high-confidence exploitable vulnerabilities with two-axis severity/confidence scoring, OWASP 2025 alignment, per-finding Haiku verification, and false positive filtering. Optional GitHub PR posting. Use when user runs /security-review, /review:security-review, requests a "security review", "security audit", "vulnerability scan", or mentions "find vulnerabil

Write optimized Dockerfiles — multi-stage builds, layer caching, security hardening, and minimal image sizes.

Apply the Opquast Digital Quality Framework (245 rules, 14 categories) when building, reviewing, or auditing websites and web applications. Use for web development quality assurance, accessibility compliance, security hardening, privacy implementation, e-commerce best practices, and holistic digital quality checks.

Reflective pass over your memory files — merge duplicates, fix stale facts, prune the index.

Audit and harden any repository with standardized quality gates, hooks, and scripts

Use when assessing or improving code quality, maintainability, performance, or security hygiene - provides workflows for analysis, code review, and systematic improvements with validation steps.

Show current consensus-loop status — pending reviews, audit state, retro marker, agent assignments. Use to check what's happening before starting work or after returning from a break.

Security techniques and quality control for prompts and agents

Squash-merge a worktree branch into the target branch with a structured commit message. Use after audit consensus and retrospective completion.

Security audit with Sentinel. Checks for vulnerabilities, secrets, dependencies, and security best practices. Use before shipping or when working on auth/crypto/sensitive areas.

Run all done-criteria checks (CQ/T/CC/CL/S/I/FV/CV) and produce a pass/fail verification report. Use after implementing code, before submitting evidence to the quorum audit.