resources/ai

Masters frontend, backend, and system architecture — designs end-to-end solutions across the full stack

Masters web security, pentesting, and red/blue team operations — coordinates comprehensive security programs

Masters cloud infrastructure, DevOps, and SRE — designs resilient cloud-native platforms

Masters data engineering, ML, and MLOps — builds end-to-end data pipelines and ML systems

Reviews code quality, best practices, and potential issues

Security vulnerability analysis with CVE lookup

Creates and maintains project documentation

Generates API documentation in OpenAPI/Swagger format

Code refactoring with behavior preservation

Database migrations with reversible up/down patterns

Unit, integration, and E2E test creation

Dependency health: CVEs, licenses, maintenance

Performance bottleneck detection and optimization

Pull request creation and changelog generation

Release planning, versioning, and changelog management

Creates new agent definitions from templates with configured permissions and instructions

Full OWASP Top 10 audit across web application stack

API-layer security: REST, GraphQL, gRPC endpoint protection

Authentication, authorization, OAuth2, JWT, session management

Secure SDLC: threat modeling, SAST/DAST, cloud security

OWASP ASVS, injection prevention, crypto misuse, XSS/SQLI prevention, CWE Top 25

Web application firewall configuration, rule tuning, bypass testing and custom rule writing

CDN, edge computing, and platform security including Cloudflare Workers and edge WAF

Architecture styles, patterns, C4 documentation, ADRs

Distributed system design, scalability, database selection

Performance optimization, load testing, database scaling

SLO/SLI, circuit breakers, disaster recovery, incident management

BeyondCorp, ZTNA, mTLS, OPA/Cedar policies, microsegmentation, JIT access

React ecosystem: hooks, state, performance, Server Components

Vue 3 ecosystem: Composition API, Pinia, Nuxt, Vite

Modern CSS, design systems, theming, layout, animations

Core Web Vitals, bundle optimization, runtime performance

WCAG 2.2, ARIA, semantic HTML, screen reader, keyboard navigation

Next.js App Router, Server Actions, streaming, auth, deployment

Angular standalone components, signals, state management, testing

REST, GraphQL, gRPC API design with OpenAPI 3.1

Schema design, query optimization, indexing, migrations

Service boundaries, communication patterns, distributed data

CI/CD, Docker, Kubernetes, Terraform, cloud infrastructure

Kafka, RabbitMQ, event-driven patterns, outbox, DLQ

Redis, CDN, HTTP caching, multi-level cache strategies

PostgreSQL/MySQL/MongoDB hardening, TDE, audit, RBAC, RLS, injection prevention

Python: async, web frameworks, testing, packaging, data

TypeScript/JS: type system, runtimes, tooling, async, web

Go: concurrency, net/http, CLI, profiling, deployment

Java 21+: Spring Boot, JPA, JVM tuning, virtual threads

Kotlin: coroutines, Ktor, Exposed, multiplatform, Flow

Rust: systems, async, Axum, unsafe, FFI, serde

Swift, SwiftUI, Swift concurrency, Core Data, testing

Jetpack Compose, ViewModel, Room, Hilt, testing

Expo, Expo Router, NativeWind, FlashList, EAS

Riverpod, GoRouter, drift, BLoC, testing

OWASP Mobile Top 10, secure storage, certificate pinning, code obfuscation

Android/iOS malware analysis, dynamic instrumentation, traffic interception, reverse engineering

Pipelines, ETL/ELT, Kafka, Spark, Airflow, dbt

PyTorch, XGBoost, training, evaluation, deployment

Model serving, feature stores, drift monitoring, CI/CD for ML

Statistical analysis, EDA, feature engineering, visualization

Cluster design, workloads, security, autoscaling, GitOps

SLO/SLI, error budgets, incident response, capacity planning

ArgoCD, Flux, Kustomize, Helm, secrets management

Istio, Linkerd, Cilium, mTLS, traffic management

AWS, GCP, Azure comparison, multi-cloud strategy

Lambda/Cloud Functions security, event injection, IAM least privilege, dependency scanning

Cross-cloud networking, transit gateways, hybrid connectivity, cloud-agnostic service mesh

Playwright, Cypress, page objects, CI integration

Chromatic, Percy, snapshot diff, component states

k6, Locust, Gatling, load/spike/soak tests

Chaos Mesh, Litmus, Gremlin, blast radius control

Coverage-guided fuzzing, AFL++, libFuzzer, crash triage, corpus optimization

Schema design, resolvers, DataLoader, caching, Relay

Systems programming, CMake, embedded, RTOS

no_std, Zephyr, probe-rs, PAC/HAL, Renode

ICS assessment, Modbus/DNP3/BACnet, Purdue model, firmware RE, MQTT security

Unity, C#, URP/HDRP, Addressables, DOTS

UE5, C++, Blueprint, GAS, Nanite, Lumen

OSINT, subdomain enumeration, cloud asset discovery, passive/active recon

Wi-Fi (WPA2/3, WPS, PMKID, evil twin), Bluetooth, RFID, SDR

Social media OSINT, dark web, data leaks, domain/infrastructure intel, threat actor profiling

SQLi, XSS, SSRF, IDOR, business logic, file upload exploitation

REST, GraphQL, gRPC security testing, JWT attacks, introspection abuse

Authentication/authorization bypass, OAuth abuse, session attacks

SSTI, deserialization, command injection, XXE, race conditions

AWS/GCP/Azure misconfiguration, container escape, IAM abuse

Filter evasion for SQLi, XSS, SSRF, LFI across major WAFs

Chromium/Firefox arch, SOP, CSP bypass, postMessage, DOM clobbering, XS-Leaks, extension security

Docker/K8s security, admission controllers, image scanning, runtime security (Falco)

AWS/GCP/Azure CSPM, IAM analysis, IaC scanning (Checkov, tfsec), compliance

Recon methodology, subdomain enum, URL discovery, nuclei, Burp Suite, report writing

SBOM (SPDX/CycloneDX), Sigstore/cosign, SLSA, dependency confusion, SCA scanning

SAST/DAST/SCA in CI/CD, security gates, secret scanning, container signing

Recon pipelines, web fuzzing, async python framework, report generation, wrappers

iOS/Android static/dynamic analysis, API testing, data storage flaws

Entitlements, TCC bypasses, XPC exploitation, Mach port abuse

Root detection bypass, keystore analysis, IPC abuse, modding

Stack/heap overflow, kernel exploitation, token stealing, SEH/ROP

SUID, capabilities, kernel exploits, container escape, cron abuse

SIP/TCC bypass, XPC services, code signing, Mach ports, entitlement abuse

Reverse engineering, fuzzing, UAF, type confusion (C/C++/Rust, all platforms)

Pickle RCE, sandbox escape, Electron/Node.js, desktop scripting vulns

Cross-platform desktop bug hunting, IPC abuse, privilege escalation research

Binary RE (PE/ELF/Mach-O), Ghidra, IDA, Frida, angr, anti-analysis bypass, patching

BloodHound, kerberos attacks, ACL abuse, DCSync, NTLM relay, AD hardening

Fuzzing (AFL++, libFuzzer), ROP/ret2libc, heap exploitation, kernel exploit, shellcode

Full engagement ops: initial access, C2, lateral movement, evasion, persistence

Phishing, vishing, physical tailgating, OSINT targeting, credential harvesting

Static/dynamic binary analysis, PE/ELF/Mach-O, anti-debug bypass, YARA

RFID cloning, lock bypassing, facility entry, badge system testing

GoPhish campaigns, DMARC/SPF/DKIM, SMTP warmup, template design, evasion techniques

Sliver/Mythic/Cobalt Strike setup, redirectors, domain fronting, Malleable C2 profiles, DNS C2

Hypothesis-driven hunts across endpoints, network, cloud (Windows/Linux/macOS)

NIST 800-61 methodology, containment, eradication, IR report generation

Memory/disk/mobile/cloud forensics, timeline analysis, anti-forensics detection

Sigma, KQL, YARA, Splunk rules, behavioral detection, Atomic Red Team

MITRE ATT&CK mapping, IoC management, YARA, MISP/OpenCTI, TTP tracking, threat reports

Nessus/OpenVAS, CVSS/EPSS prioritization, patching SLAs, metrics, verification

Memory (Volatility), disk (Sleuth Kit), file carving, timeline analysis, cloud forensics

SOAR playbooks, SIEM tuning (ELK/Splunk), alert triage, case management, Python engine

Atomic Red Team, adversary emulation, detection gap analysis, Sigma rule writing, Caldera/Infection Monkey

Automated purple team exercises, detection validation, attack simulation scheduling, metrics tracking

OWASP Top 10 for LLMs, prompt injection defense, adversarial ML, model extraction, secure RAG

Technical writing, style enforcement, code examples, tutorials

6-pass editorial review: structure, clarity, grammar, consistency, inclusivity, accuracy

3-level revision: light (grammar), medium (structure), heavy (restructure)

Technical translation: format preservation, locale-specific style, terminology management

Document architecture, cross-reference management, metadata schemas, automated generation pipelines

Markdown-to-HTML rendering, custom remark/rehype plugins, static site generation

Markdown editing workflows, linting, formatting, table of contents, link validation

OpenTelemetry, PromQL, dashboards, alerting, tracing

OpenTelemetry instrumentation, traces/metrics/logs correlation, collector configuration, sampling

Log aggregation, parsing pipelines, retention policies, ELK/Loki stack design, compliance logging

SOC 2 trust criteria, evidence collection, audit readiness

Data subject rights, consent management, breach notification

Risk assessment, policy management, vendor risk, evidence collection, compliance calendar

PCI DSS 4.0 compliance, cardholder data environment scoping, SAQ completion, QSA readiness

HIPAA Privacy/Security/Breach Rules, BAAs, risk analysis, ePHI safeguards

FedRAMP authorization, SSP development, control implementation, continuous monitoring

SOX ITGC auditing, access controls, change management, computer operations, evidence collection

Shell scripting: bash, zsh, POSIX sh, strict mode, portability, debugging, patterns

Linux administration: systemd, filesystems, LVM, networking, performance, security

macOS administration: launchd, plists, Homebrew, defaults, automation, AppleScript

CIS benchmarks, SSH/kernel hardening, auditd, nftables, PAM, file integrity

SIP, FileVault, Gatekeeper, profiles, TCC, firewall, compliance scripting

IR automation: acquisition scripts, timeline analysis, IOC scanning, orchestration

Red team scripting: reverse shells, persistence, data exfiltration, C2 bootstrap, anti-forensics

Firewalls (nft/iptables), VPN (WireGuard/OpenVPN), IDS/IPS (Suricata/Snort), segmentation

Windows Server, PowerShell, AD, Group Policy, security configuration, performance tuning

Kubernetes/Nomad cluster management, scheduling, autoscaling, service discovery

Distributed storage, Ceph/GlusterFS, NFS/SMB, backup strategies, data protection

Data mapping, consent management, anonymization and privacy-by-design implementation

User consent management, data anonymization, pseudonymization, differential privacy

DSAR processing, CCPA compliance, data subject requests, deletion workflows, records management

Smart contract auditing, DeFi security analysis, cross-chain bridge assessment

Cross-chain bridge security, wallet integration, DeFi protocol assessment, MEV analysis

Telecommunications infrastructure security: SS7, 5G, VoIP, IMSI catcher detection

Automotive security: CAN bus analysis, ECU fuzzing, telematics and V2X security

Hardware security: side-channel attacks, JTAG/SWD, fault injection, secure element analysis

Medical device security: FDA premarket guidance, HIPAA security rule, connected device assessment

Aviation, maritime and energy sector security: critical infrastructure, industrial control systems

Physical security assessment and mainframe security: RACF, ACF2, Top Secret, z/OS auditing