Security

active

As a security engineer, these tools help you catch vulnerabilities before they ship. XSS vectors, environment variable leaks, SSRF patterns, and dependency risks are surfaced during the review cycle.

Workflows

Security Gate

verified

Pre-merge security scanning — XSS vectors, env variable leaks, SSRF patterns, dependency vulnerabilities, and branch protection.

review

eq-review-security

Standalone security review — XSS vectors, env variable leaks, SSRF, dangerouslySetInnerHTML

guardrail

security-analysis

Deep security audit prompt — maps attack surfaces, assesses OWASP/ASVS coverage, and produces prioritized remediation plans

threat-modeler

STRIDE-based threat modeling agent — maps attack surfaces, classifies risks, and generates actionable threat models from codebase analysis