code-guardian

Triage and prioritize CVE findings from INFYNON package scans. Use when the user has scan results and needs to decide what to fix, defer, or handle — covers severity matrix, fix strategies, and safe version selection.

Set up and manage INFYNON Eagle Eye — continuous CVE monitoring with scheduled email alerts. Use when the user wants vulnerability monitoring over time, automated CVE alerts, SMTP configuration, or ongoing security monitoring.

Secure project dependencies with INFYNON CLI (`infynon pkg`). Use when the user asks about CVE scanning, vulnerable packages, dependency auditing, secure installs, or when lock files are detected in the project.

Store, retrieve, and manage codebase knowledge in INFYNON Trace. Use when user asks about shared notes, handoffs, PR context, architecture memory, backends (Redis/SQL), knowledge graph, or when .infynon/trace/ is detected.

Configure and run INFYNON Trace session hooks for automatic memory loading and saving. Install only when user explicitly asks — hooks go in project .claude/settings.json, never system-level.

Build, run, and analyze API test flows with INFYNON Weave. Use when the user asks about API testing, integration testing, security probes, OTP/2FA inputs, or when .infynon/api/ directory is detected.

Manage canonical (validated, durable) memory in INFYNON Trace. Use when user asks about architecture decisions, API contracts, promotion flows, or auditing canonical notes.