What problem does it solve? It helps developers write secure-by-default code and catch major vulnerabilities in existing projects by applying curated, framework-specific security guidance instead of relying on generic advice. ## Core Features & Use Cases - Framework-aware guidance: Detects the languages and frameworks in your project and loads matching security specs from its references directory (Go backend, Express/Node.js server, and general web frontend). - Three operating modes: Write secure code by default, passively flag critical issues while editing, or generate a full prioritized security report with severity sections and line-number references. - Safe fix workflow: Applies one finding at a time with clear comments, respects project overrides, and follows your existing test and commit flows to avoid regressions. - Use Case: Ask for a security review of your Express API and receive a markdown report listing CSRF gaps, cookie misconfigurations, and injection risks ranked by severity, then have each issue fixed incrementally. ## Quick Start Ask the assistant to perform a security best practices review of this project and write the findings to a report file.
