Security

Secure-by-default environment variable management for Claude Code sessions.

Web fuzzing with ffuf

Secure environment variable management ensuring secrets are never exposed in Claude sessions, termin

Codified expertise for customs documentation, tariff classification, duty optimisation, restricted p

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review,

Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers recon

Advogado criminalista especializado em Maria da Penha, violencia domestica, feminicidio, direito pen

Advogado especialista em todas as areas do Direito brasileiro: familia, criminal, trabalhista, tribu

AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any by

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, ident

Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identif

Build secure, scalable authentication and authorization systems using industry-standard patterns and

Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks

IAM policy review, hardening, and least privilege implementation

Automate AWS secrets rotation for RDS, API keys, and credentials

Comprehensive AWS security posture assessment using AWS CLI and security best practices

Comprehensive patterns and techniques for analyzing compiled binaries, understanding assembly code,

Identify and exploit authentication and session management vulnerabilities in web applications. Brok

Run Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised package

Execute comprehensive web application security testing using Burp Suite's integrated toolset, includ

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching res

Analyze cryptographic code to detect operations that leak secret data through execution timing varia

Harden Docker/container images and runtime deployments with secure base images, non-root users, CVE

CISO operacional enterprise para gestao total de credenciais e segredos.

You are a dependency security expert specializing in vulnerability scanning, license compliance, and

Security-focused code review for PRs, commits, and diffs.

Templates and patterns for creating legally sound employment documentation including contracts, offe

Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill

Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance. Reviews food facility reco

Expert AI auditor for Medical Device (SaMD) compliance, IEC 62304, and 21 CFR Part 820. Reviews DHFs

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing wit

Identify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers

Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipa

Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse enginee

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and

Maps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS

Practical implementation guide for GDPR-compliant data processing, consent management, and privacy c

Find exploitable vulnerabilities in GitHub Actions workflows. Every finding MUST include a concrete

Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML co

Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (ID

Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and

Draft privacy policies, terms of service, disclaimers, and legal notices. Creates GDPR-compliant tex

Centralized 'Truth Engine' for cross-jurisdictional legal context (US, EU, CA) and contract scaffold

Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconf

Expert malware analyst specializing in defensive malware research, threat intelligence, and incident

Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for in

⚠️ AUTHORIZED USE ONLY > This skill is for educational purposes or authorized security assessments o

Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing z

Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processi

Provide a comprehensive checklist for planning, executing, and following up on penetration tests. En