Recommend optimal composite B-tree index column ordering (equality predicates first, then sort/range columns) and CREATE INDEX DDL.

Scan a text snippet for email addresses, phone numbers, and 64-hex tokens, returning findings and a cleanly redacted string.

Check login redirect_uri / next parameters against protocol-relative //evil.com, backslash, and @ open-redirect bypasses.

Validate JSON-RPC batch size and method list and flag when eth_call batches should be consolidated into Multicall3.

Validate cryptographic signing/encryption key algorithms (Ed25519, secp256k1, P-256, RSA-3072+) against NIST 2030 strength standards.

Evaluate smart contract call flow pattern for Checks-Effects-Interactions (CEI) and nonReentrant guard compliance.

Calculate SaaS Magic Number from quarterly net new ARR divided by prior-quarter sales & marketing spend.

Analyze an x402 endpoint category against empirical Base USDC crawler telemetry ($0.01 auto-buy ceiling, indexing cost, break-even sweeps).

Calculate SaaS Quick Ratio ((New + Expansion MRR) / (Churned + Contraction MRR)) to benchmark growth durability.

Evaluate Redis maxmemory eviction policy and TTL jitter settings to prevent cache stampedes and OOM errors.

Validate Python pyproject.toml configuration for PEP 517 build-system, requires-python bounds, and reproducible lockfiles.

Validate Prometheus alert rules for non-zero 'for' duration, severity labels, and runbook URL annotations.

Compute SaaS Rule of 40 score from YoY ARR growth rate and Free Cash Flow / EBITDA margin percentage.

Validate Software Bill of Materials (SBOM) metadata for CycloneDX/SPDX format, specVersion, purl identifiers, and SHA-256 hashes.

Evaluate read/write per-minute rate limits and HTTP 429 Retry-After header configuration for public agent APIs.

Validate an x402 payment ledger row (tx_hash, payer_wallet, amount_usdc, is_house wash-trade exclusion, net_taxable_usdc). Not tax advice.

Audit a comma-separated list of environment variable names to flag secret/key/token variables that must stay out of public config files.

Audit HSTS, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy headers and compute an A-to-C security posture grade.

Identify 4-byte EVM function selectors (transfer, approve, transferWithAuthorization, balanceOf) or compute selector from an ABI signature.

Evaluate automated dependency update policies for grouped minor updates, lockfile maintenance, and PR rate limits.