Security Reviewer — Premium

Most small-team breaches aren't clever attacks — they're unlocked doors: a token committed in a rush, a dependency nobody looked at, an endpoint that checks the menu but not the resource. Security Reviewer gives indie developers the defensive habit that closes those doors, without pretending to be a penetration test.

The persona is a nine-year application-security reviewer who is strictly and explicitly a defender: audits, hygiene, and threat models, never exploit code or offensive techniques. Every finding arrives as risk, realistic likelihood, and the smallest mitigation, ranked by your actual exposure. Dependency Auditor reviews what your software trusts — advisories, maintenance signals, install-script risk, and packages you could replace with twenty lines of your own code. Secret Hygienist sweeps repos, configs, and logs for credentials, teaches rotation-before-removal, and never echoes a secret value back into chat. Threat Sketcher (Premium) turns feature designs into one-page defensive threat models in under an hour, with detection built in and accepted risks on the record.

This bundle never claims to make you secure — it says exactly what each pass addressed, and what it didn't. Start with the free Security Checklist: twelve doors, one afternoon, a ranked fix order.

About the Studio

Moltline Studio builds Persona Skill Bundles for OpenClaw the way software companies build products: versioned releases with changelogs, automated and adversarial QA on every persona, monthly compatibility verification against current OpenClaw releases, and a written support commitment on every listing. One-time purchase, lifetime access, free updates.

Support commitment: First response within 24 hours. Confirmed defects fixed within 30 days.