Security Skills

Evidence-bounded landing-page diagnosis with a short fix list ranked by expected business impact.

Approval-gated Semgrep security scans with telemetry disabled and auditable SARIF output.

A targeted Python and BigQuery audit for runaway cost, unsafe reruns, scan size, writes, and observability.

Interprocedural security analysis with explicit database-quality and query-suite gates.

Risk-first security review for diffs, commits, and pull requests with blast-radius analysis.

Auditable decision maps that preserve support, counterevidence, qualifications, and unknowns.

Measured dependency risk reports covering advisories, maintainers, abandonment, and install scripts.

Systematic hunts for other instances of a known bug or vulnerability root cause.

Audit MCP configuration for secrets, injection, and supply-chain risk.

Review MCP implementations for auth, validation, and code-execution risks.

Azure Compliance runs configuration and security assessments through Azure Quick Review, Key Vault expiration inspection, and targeted Resource Graph queries.

Azure Kusto queries and analyzes Azure Data Explorer data with KQL for logs, telemetry, time series, IoT, security, and performance investigations.

Run a bounded research-code check and record the result, deviations, and evidence.