# #security-privacy-compliance — MDRSS hashtag feed

> Public MDRSS cards tagged #security-privacy-compliance.
> Canonical feed: https://mdrss.com/feeds/security-privacy-compliance

## Cards (39)

### [Signed Audit Trails for Claude Code Tool Calls](https://mdrss.com/security/cryptography-privacy-and-compliance/901436/901436.md)

Cookbook-style walkthrough for cryptographically signed receipts on every Claude Code tool call. This is the teaching skill. For the runtime implementation, install the protect-mcp plugin. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Review](https://mdrss.com/security/application-security-and-threat-modeling/901434/901434.md)

You are a Senior Code Reviewer with 30 years of experience in software quality, security analysis, and architectural compliance. You are objective, constructive, and precise. You explain the why behind every finding. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Threat-mitigation mapping — templates and worked examples](https://mdrss.com/security/application-security-and-threat-modeling/901427/901427.md)

Threat-mitigation mapping — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [stride-analysis-patterns — templates and worked examples](https://mdrss.com/security/application-security-and-threat-modeling/901426/901426.md)

User  --  Web App  --  API Gateway  --  Backend Services  | v  Database . Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [security-requirement-extraction — templates and worked examples](https://mdrss.com/security/application-security-and-threat-modeling/901425/901425.md)

security-requirement-extraction — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [attack-tree-construction — templates and worked examples](https://mdrss.com/security/application-security-and-threat-modeling/901424/901424.md)

attack-tree-construction — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [SAST Security Plugin](https://mdrss.com/security/application-security-and-threat-modeling/901423/901423.md)

Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Security Hardening Orchestrator](https://mdrss.com/security/application-security-and-threat-modeling/901422/901422.md)

You MUST follow these rules exactly. Violating any of them is a failure. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Dependency Vulnerability Scanning](https://mdrss.com/security/application-security-and-threat-modeling/901421/901421.md)

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Protocol Reverse Engineering](https://mdrss.com/security/forensics-and-reverse-engineering/901419/901419.md)

Comprehensive techniques for capturing, analyzing, and documenting network protocols for security research, interoperability, and debugging. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Memory Forensics](https://mdrss.com/security/forensics-and-reverse-engineering/901418/901418.md)

Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for incident response and malware analysis. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Binary Analysis Patterns](https://mdrss.com/security/forensics-and-reverse-engineering/901417/901417.md)

Comprehensive patterns and techniques for analyzing compiled binaries, understanding assembly code, and reconstructing program logic. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [anti-reversing-techniques — detailed patterns and worked examples](https://mdrss.com/security/forensics-and-reverse-engineering/901416/901416.md)

For advanced VM detection (RDTSC delta calibration, VMware backdoor port, hypervisor leaf enumeration, guest driver artifact checks), see references/advanced-techniques.md. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Reverse engineer](https://mdrss.com/security/forensics-and-reverse-engineering/901415/901415.md)

You are an elite reverse engineer with deep expertise in software analysis, binary reverse engineering, and security research. You operate strictly within authorized contexts: security research, CTF competitions, authorized penetration testing, malware defense, and educational pu. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Malware analyst](https://mdrss.com/security/forensics-and-reverse-engineering/901414/901414.md)

You are an elite malware analyst focused on defensive security research. Your purpose is to help security professionals understand malicious software to protect systems and respond to incidents. You operate strictly within defensive and educational contexts. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Firmware analyst](https://mdrss.com/security/forensics-and-reverse-engineering/901413/901413.md)

You are an elite firmware analyst with deep expertise in embedded systems security, IoT device analysis, and hardware reverse engineering. You operate within authorized contexts: security research, penetration testing with authorization, CTF competitions, and educational purposes. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [on-call-handoff-patterns — templates and worked examples](https://mdrss.com/security/forensics-and-reverse-engineering/901323/901323.md)

1. API latency around 02:00-03:00 UTC (backup window) 2. Auth service memory (restart if 80%). Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Incident Runbook Templates](https://mdrss.com/security/forensics-and-reverse-engineering/901322/901322.md)

Production-ready templates for incident response runbooks covering detection, triage, mitigation, resolution, and communication. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Intelligent Issue Resolution Orchestrator](https://mdrss.com/security/forensics-and-reverse-engineering/901321/901321.md)

You MUST follow these rules exactly. Violating any of them is a failure. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Incident Response Orchestrator](https://mdrss.com/security/forensics-and-reverse-engineering/901320/901320.md)

You MUST follow these rules exactly. Violating any of them is a failure. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Incident responder](https://mdrss.com/security/forensics-and-reverse-engineering/901319/901319.md)

You are an incident response specialist with comprehensive Site Reliability Engineering (SRE) expertise. When activated, you must act with urgency while maintaining precision and following modern incident management best practices. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [gdpr-data-handling — detailed worked examples](https://mdrss.com/security/cryptography-privacy-and-compliance/901318/901318.md)

gdpr-data-handling — detailed worked examples captures reusable agent playbook guidance for cryptography, privacy & compliance. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [employment-contract-templates — templates and worked examples](https://mdrss.com/security/cryptography-privacy-and-compliance/901317/901317.md)

employment-contract-templates — templates and worked examples captures reusable agent playbook guidance for cryptography, privacy & compliance. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [XSS Vulnerability Scanner for Frontend Code](https://mdrss.com/security/application-security-and-threat-modeling/901311/901311.md)

You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection points, unsafe DOM manipulation, and improper sanitization. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Mobile security coder](https://mdrss.com/security/application-security-and-threat-modeling/901310/901310.md)

You are a mobile security coding expert specializing in secure mobile development practices, mobile-specific vulnerabilities, and secure mobile architecture patterns. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Frontend security coder](https://mdrss.com/security/application-security-and-threat-modeling/901309/901309.md)

You are a frontend security coding expert specializing in client-side security practices, XSS prevention, and secure user interface development. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [auth-implementation-patterns — detailed patterns and worked examples](https://mdrss.com/security/application-security-and-threat-modeling/901272/901272.md)

auth-implementation-patterns — detailed patterns and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Dependency Audit and Security Analysis](https://mdrss.com/security/application-security-and-threat-modeling/901238/901238.md)

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Backend security coder](https://mdrss.com/security/application-security-and-threat-modeling/901197/901197.md)

You are a backend security coding expert specializing in secure development practices, vulnerability prevention, and secure architecture implementation. Use it to give an agent explicit responsibilities, steps and constraints.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Cryptocoding: Secure Cryptography Engineering Practices](https://mdrss.com/security/cryptography-privacy-and-compliance/901124/901124.md)

This page lists "coding rules" for implementations of cryptographic operations, and more generally for operations involving secret or sensitive values. Use it to build a structured path from fundamentals to hands-on practice.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Awesome Post-Quantum](https://mdrss.com/security/cryptography-privacy-and-compliance/901123/901123.md)

A curated list of resources about post-quantum cryptography. Use it to build a structured path from fundamentals to hands-on practice.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Not so awesome Web3 Security Researcher roadmap](https://mdrss.com/security/application-security-and-threat-modeling/901121/901121.md)

Of course, this is not awesome. This is not the curated list of blue underlined words that you will click, read, and jump to the next one, hoping to finish as fast as possible, or maybe hoping not to finish at all. You are going to become a security RESEARCHER . Yeah, RESEAR. Use it as a repeatable review, validation or hardening pass.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [License List Data](https://mdrss.com/security/cryptography-privacy-and-compliance/901114/901114.md)

A curated reference on cryptography, privacy & compliance centered on License List Data. Use it to make implementation decisions and avoid common dead ends.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [TryHackMe Road Map](https://mdrss.com/security/cryptography-privacy-and-compliance/901106/901106.md)

Hey Guys, here is a list of 350+ Free TryHackMe rooms to start learning hacking. I have arranged and compiled it according to different topics so that you can start hacking right away. Use it to make implementation decisions and avoid common dead ends.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Digital Forensics: Tools, Methods and Workflows](https://mdrss.com/security/forensics-and-reverse-engineering/901094/901094.md)

Digital Forensics is the process of recovering and preserving material found on digital devices during the course of criminal investigations. Digital forensics tools include hardware and software tools used by law enforcement to collect and preserve digital evidence and support o. Use it to build a structured path from fundamentals to hands-on practice.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Nmap Cheat Sheet](https://mdrss.com/security/application-security-and-threat-modeling/901072/901072.md)

Nmap ("Network Mapper") is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap. Use it as a repeatable review, validation or hardening pass.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Awesome Audits Checklists](https://mdrss.com/security/application-security-and-threat-modeling/901035/901035.md)

A curated reference on application security & threat modeling centered on Awesome Audits Checklists. Use it as a repeatable review, validation or hardening pass.

Classification: security/application-security-and-threat-modeling · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [PQClean](https://mdrss.com/security/cryptography-privacy-and-compliance/901028/901028.md)

As a first main target, we are collecting C implementations that fulfill the requirements listed below. We also accept optimised implementations, but still requiring high-quality, tested code. Use it to navigate the topic and choose relevant methods, papers or tools.

Classification: security/cryptography-privacy-and-compliance · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1

### [Awesome Threat Detection and Hunting](https://mdrss.com/security/forensics-and-reverse-engineering/901000/901000.md)

A curated reference on forensics & reverse engineering centered on Awesome Threat Detection and Hunting. Use it as a repeatable review, validation or hardening pass.

Classification: security/forensics-and-reverse-engineering · Feed: security · Updated: 2026-08-04T13:54:51.641Z · Version: 1