Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open switches, weak crypto, permissive access, debug leakage. Parallel sweeps collect candidates, then a refuting verifier traces each one to the security decision it reaches before

Searches Burp Suite project files for security analysis

Detects timing side-channels in cryptographic code

Performs security-focused differential review of code changes

Safely analyzes and cleans up local git branches and worktrees, categorizing them as merged, squash-merged, superseded, or active work before deleting anything.

Scans Android APKs for Firebase security misconfigurations

Creates Semgrep rules with test-first methodology

Update CLAUDE.md with learnings from this session

Explain Stripe error codes and provide solutions with code examples

Define and enforce this project's quality bar — interview, sane defaults, CONSTRAINTS.md

Ask a question about the repository using wiki context and source file references

Lists available Sanity skills and help topics.

Create a new track with specification and phased implementation plan