Find security traps in APIs and app settings.
Identifies security-sensitive API and configuration designs that developers can misuse, producing validated findings about unsafe defaults and choices.
When to use it
Use when reviewing API designs, configuration schemas, cryptographic interfaces, or authentication and authorization interfaces for security-relevant developer choices.
Give it project APIs or configurations to review; it returns security-design findings validated through misuse reproduction, exploitability checks, and mitigation testing.
What you provide
No setup requirements listed.
No additional actions listed.