EXTENSIONS

Detects and mitigates the Dirty Frag Linux local privilege escalation

Run Claude Code (and other workloads) inside a macOS apple/container sandbox.

Query and inspect GuardDuty findings from a delegated administrator account,

GitHub repository security auditing with support for native features and third-party tool detection

Tailnet health reporting — find devices running outdated Tailscale clients and alert via Slack

Cloudflare security and configuration audit workflow.

HashiCorp Vault secrets management via REST API (KV v1 and v2)

Install Tailscale on remote VMs over SSH and sync tailnet machine inventory from tailscale status JSON into per-machine resources.

Tailscale tailnet management — 10 model types covering devices, users, ACLs, DNS, auth keys, webhooks, settings, contacts, posture, and log config. 22 workflows for device inventory, user lifecycle, ACL audit, security audit, compliance, incident response, monitoring, and more. Fix: OAuth token cache now keys on credentials so different tailnets/OAuth clients no longer share tokens.