Get today's Astronomy Picture of the Day from NASA.

Get the Astronomy Picture of the Day for a specific date (YYYY-MM-DD).

Get a random Astronomy Picture of the Day from NASA's archives.

Run a full multi-pass security and quality scan on a codebase directory.

Executes all analyzers: secret detection, OWASP security patterns, debug statement detection, code quality checks, style linting, and dependency vulnerability scanning via OSV.dev.

Use this when asked to review, audit, or scan a codebase for issues.

Scan a codebase directory for exposed secrets, API keys, and credentials.

Detects AWS keys, GitHub tokens, GCP keys, Slack tokens, JWTs, private keys, database connection strings, and generic hardcoded secrets.

Use this when asked to check for leaked credentials or secrets.

Scan a codebase for OWASP-style security antipatterns.

Detects SQL injection vectors, XSS sinks, eval/exec usage, insecure cryptographic primitives, path traversal, insecure deserialization, and shell injection patterns.

Use this when asked about security vulnerabilities or OWASP compliance.

Scan a codebase for code quality and style issues.

Checks for debug/print statements, oversized files, long lines, deep nesting, too many function parameters, trailing whitespace, TODO/FIXME comments, mixed indentation, superfluous comments, and naming convention violations (PEP 8 for Python, camelCase for JS/TS).

Use this when asked to check code quality, readability, or style.

Scan a project's dependency manifests for known CVEs via OSV.dev.

Parses package.json, requirements.txt, pyproject.toml, go.mod, Cargo.toml, and Gemfile.lock, then queries the OSV vulnerability database for each dependency.

Use this when asked to check dependencies for vulnerabilities or CVEs.