Security guidance for Open Collective. Use for security questions or focused reviews; full audits require an explicit request.
Investigates internal Open Collective security concerns. Use to validate a finding and prepare an engineering handoff.
Investigates Open Collective security reports and drafts contributor replies. Use for report triage or bounty eligibility checks.
Translates untranslated frontend locale strings with repo scripts. Use to translate a locale or reduce its untranslated entries.
Checks 2FA enforcement across GraphQL V2 mutations. Use for coverage gaps or on-demand checks.
Checks OAuth scope coverage and correctness across GraphQL V2 fields. Use for scope audits or drift checks.
Validates and triages open opencollective-security issues. Use for issue reviews or batch revalidation.
Drafts user-facing docs for Open Collective frontend features. Use when asked to document or update a feature workflow, or to prepare a documentation PR.