Quality

Performs comprehensive security audits, threat modeling (STRIDE/PASTA), code reviews, and incident response across code, infrastructure, APIs, and AI agents. Use for red/blue team exercises, OWASP compliance, and hardening any project.

Conduct accessibility audits for WCAG compliance, identify barriers, and get remediation guidance to ensure inclusive digital experiences.

Find and fix WCAG 2.2 accessibility issues with two modes: report (sweep a codebase or page for a prioritized report) and fix (audit, edit, verify loop). Prefers live-DOM auditing, falls back to browser-MCP or HTML strings.

Compares a live page's accessibility violations against a baseline to report only new and fixed violations. Use during development to catch regressions before they ship.

Audit a live page for accessibility issues, locate each WCAG violation precisely, and return a selector-grounded fix worklist without editing.

Systematically address pull request review and issue comments using the GitHub CLI. Fetches comments, plans fixes, and responds to threads automatically.

Audits web pages for accessibility issues against WCAG guidelines, generating detailed reports with fixes.

Performs adversarial code reviews to identify bugs, security vulnerabilities, and design flaws before deployment. Use when you want a rigorous, opponent-style review of your code changes.

Automatically reviews API definitions for adherence to RESTful standards, proper resource naming, and consistency.

Run a WCAG 2.1 AA accessibility audit on a design or page to identify color contrast, keyboard navigation, touch target, and screen reader issues before handoff.

Document control system management for medical device QMS. Covers document numbering, version control, change management, and 21 CFR Part 11 compliance.

Traces a reproduced symptom (failing test, captured screenshot, console error, wrong HTTP response) to the source code that causes it, identifying the specific file and approximate line, then rates confidence honestly.