agent skill security scanner
by Elyas
Audits agent skills and MCP manifests for prompt injection, data exfiltration, and over-permissioned access.
I build orbzy.app (AI-discoverability scanning), regulatorysignals.com (regulatory change monitoring), and listybitsy.com, alongside a catalog of Claude Code skills spanning compliance audits (GDPR, SOC 2, DORA, EU AI Act), Stripe/Supabase/agent-infrastructure security review, and agent/MCP infrastructure — each one grounded in a dated, primary-source snapshot rather than model memory, and put through an adversarial review pass before it ships.
by Elyas
Audits agent skills and MCP manifests for prompt injection, data exfiltration, and over-permissioned access.
by Elyas
Optimize MCP tool definitions and schemas to stop agents from calling the wrong tools or hallucinating parameters.
by Elyas
Dynamic red-teaming skill for testing prompt injection vulnerabilities in live MCP server and agent setups.
by Elyas
Operationalize MCP server security with version-pinned registries, typosquat detection, and automated CI/CD gates.
by Elyas
Migrate Next.js routes to App Router with mandatory verification of cache semantics and component boundaries.
by Elyas
Audit cold email campaigns against CAN-SPAM, CASL, PECR, and GDPR using primary statutory requirements.
by Elyas
Builds pSEO pipelines anchored to Google's spam policies to prevent scaled content abuse penalties.
by Elyas
Generate real estate marketing copy with automated federal Fair Housing Act language screening and risk flagging.
by Elyas
Generate GDPR Article 30 ROPA documents by tracing PII flows directly from source code and SDK integrations.
by Elyas
Converts law firm intake notes into attorney memos with conflict-check lists and high-risk deadline flags.
by Elyas
Extracts shipment details from RFQs and drafts accurate quotes using your specific freight rate cards.
by Elyas
Data-driven menu engineering and research-backed description rewriting for restaurants.
by Elyas
Professional ASO metadata optimizer for iOS and Google Play that prevents rejection and maximizes indexing space.
by Elyas
Flags high-cost Terraform anti-patterns and infrastructure trade-offs before you hit apply.
by Elyas
Triage SaaS contracts for auto-renewal traps, liability gaps, and IP risks using a concrete risk playbook.
by Elyas
Generates audit-ready SOC 2 evidence artifacts for CC6 and CC8 mapped to actual system exports and logs.
by Elyas
Commercial packaging and catalog-overlap protection for production-grade Claude Code skills.
by Elyas
Static security auditor for MCP servers to detect injection, confused-deputy, and scope-creep vulnerabilities.
by Elyas
Audit and fix Stripe integration bugs including webhook idempotency, race conditions, and missing dispute handling.
by Elyas
Instruments code with prompt caching, model downgrades, budget guards, and cost logging to reduce LLM spend.
by Elyas
Audit Supabase RLS policies for IDOR vulnerabilities and verify fixes with cross-tenant attack queries.
by Elyas
Audit product readiness for EU Digital Product Passports across ESPR and Battery Regulation categories.
by Elyas
Generates machine-readable AI licensing terms and robots.txt configs for pay-per-crawl and bot management.
by Elyas
Audit and design behavioral-based moderation systems for communities to stop AI spam without relying on text detectors.
by Elyas
Identify ADA Title II web compliance deadlines and audit surfaces against WCAG 2.1 AA for government entities.
by Elyas
Audits AI hiring tools against Illinois HB 3773 requirements, including ZIP code proxies and notice obligations.
by Elyas
Determines NIS2 scope, entity classification, and readiness gaps based on sector, size, and EU Member State law.
by Elyas
Audits marketing copy and packaging against EU Directive 2024/825 to catch greenwashing gaps before 2026 enforcement.
by Elyas
Audits EVM contract bytecode for honeypots, drainers, and malicious owner patterns before you interact.
by Elyas
Simulate and analyze EVM transactions on local forks to verify state changes and slippage before broadcasting.
by Elyas
Audit cookie consent flows and manage DSAR workflows against active GDPR and ePrivacy standards.
by Elyas
High-precision fact checking that traces claims to primary sources and assigns provenance-strength grades.
by Elyas
Audits DORA ICT registers and contracts for template integrity, missing arrangements, and Article 30 clause compliance.
by Elyas
Audit email infrastructure against 2024/2025 Gmail, Yahoo, and Outlook bulk-sender compliance requirements.
by Elyas
Identify and audit EU AI Act Article 50 transparency obligations for chatbots and AI-generated content.
by Elyas
Audit GPSR readiness for non-EU sellers to prevent listing suppression on Amazon, Etsy, and eBay.
by Elyas
Audit LLM spend to find recoverable waste in prompt caching, model routing, and token usage.
by Elyas
Audit e-commerce payment pages for PCI DSS v4.0.1 script integrity and tamper-detection compliance.
by Elyas
Audits contracts for regulatory-change triggers and maps obligations to primary monitoring sources.
by Elyas
Turn instructional videos into structured, schema-validated specs without hallucinating missing details.
by Elyas
Add WebMCP annotations to help AI agents navigate, search, and interact with your website forms.
by Elyas
Audit agentic systems against runtime controls and generate compliance artifacts for ISO 42001 and NIST AI RMF.
by Elyas
Automates CCPA ADMT scoping and generates regulatory risk assessments for AI deployments.
by Elyas
Replace ignored B2B cold emails with a structural framing that targets buyer confidence instead of ignorance.
by Elyas
Audit and remediate Shopify and WooCommerce stores for EAA, WCAG 2.1 AA, and ADA Title II compliance.
by Elyas
Audits codebases for HIPAA Security Rule gaps, identifies PHI leaks, and maps BAA requirements.
by Elyas
HTSUS classification and duty-stacking audit tool for defensible customs entries and duty-savings identification.
by Elyas
Enforce three-way IOLTA reconciliation and detect regulatory defects to prevent bar discipline.
by Elyas
A 6-layer engineering containment gate for agents that move real money.
by Elyas
An evidence-based 7-pillar security gate for AI-assisted apps to prevent leaks, IDOR, and infrastructure gaps.