check▌

Apply PDCA cycle for continuous improvement through iterative problem-solving and process optimization.

If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.

Test website responsiveness across viewport widths, detect layout transitions, and report where layouts break. \n \n Supports three operating modes: Standard Check (8 key breakpoints), Sweep (15 widths at 160px increments), and Targeted Range (user-specified widths at 80px increments) \n Runs 8 layout checks per viewport covering horizontal overflow, text overflow, navigation transitions, content stacking, image scaling, touch targets, whitespace balance, and CTA visibility \n Detects and report

Security audit framework for web applications and REST APIs covering OWASP Top 10 vulnerabilities. \n \n 20 rules organized across 5 categories: Authentication & Authorization, Data Protection, Input/Output Security, Configuration & Headers, and API & Monitoring \n Covers critical vulnerabilities including injection attacks, broken access control, cryptographic failures, CSRF, SSRF, and insecure deserialization with code examples for both vulnerable and secure patterns \n Includes

Systematically verify suspected security bugs and classify them as true or false positives with documented evidence. \n \n Guides you through structured claim analysis, data flow tracing, and gate reviews to eliminate false positives before reporting \n Supports two verification routes: standard (single-pass checklist for straightforward bugs) and deep (full task orchestration for complex, cross-component, or concurrent bugs) \n Includes built-in escalation checkpoints, bug-class-specific verifi

If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.

Security audit checklist for Convex applications covering authentication, exposure, validation, and access control. \n \n Five-part checklist covering authentication provider setup, function exposure (public vs. internal), argument validation strictness, row-level access control, and environment variable handling \n Includes TypeScript code examples for secure patterns: authentication helpers, ownership verification before updates/deletes, and strict argument validators \n Highlights common pitf

Perform comprehensive QC on the presentation across four dimensions. Read every slide, then report findings.

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance.