Vulnerability Scan

Secure-by-default environment variable management for Claude Code sessions.

Web fuzzing with ffuf

Secure environment variable management ensuring secrets are never exposed in Claude sessions, termin

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review,

Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers recon

AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any by

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, ident

Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identif

Build secure, scalable authentication and authorization systems using industry-standard patterns and

Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks

IAM policy review, hardening, and least privilege implementation

Automate AWS secrets rotation for RDS, API keys, and credentials

Comprehensive AWS security posture assessment using AWS CLI and security best practices

Comprehensive patterns and techniques for analyzing compiled binaries, understanding assembly code,

Identify and exploit authentication and session management vulnerabilities in web applications. Brok

Run Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised package

Execute comprehensive web application security testing using Burp Suite's integrated toolset, includ

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching res

Analyze cryptographic code to detect operations that leak secret data through execution timing varia

Harden Docker/container images and runtime deployments with secure base images, non-root users, CVE

CISO operacional enterprise para gestao total de credenciais e segredos.

You are a dependency security expert specializing in vulnerability scanning, license compliance, and

Security-focused code review for PRs, commits, and diffs.

Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill

Expert guidance for ffuf web fuzzing during penetration testing, including authenticated fuzzing wit

Identify and exploit file path traversal (directory traversal) vulnerabilities that allow attackers

Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipa

Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse enginee

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and

Maps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS

Practical implementation guide for GDPR-compliant data processing, consent management, and privacy c

Find exploitable vulnerabilities in GitHub Actions workflows. Every finding MUST include a concrete

Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML co

Provide systematic methodologies for identifying and exploiting Insecure Direct Object Reference (ID

Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and

Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconf

Expert malware analyst specializing in defensive malware research, threat intelligence, and incident

Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for in

⚠️ AUTHORIZED USE ONLY > This skill is for educational purposes or authorized security assessments o

Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing z

Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processi

Provide a comprehensive checklist for planning, executing, and following up on penetration tests. En

Provide a comprehensive command reference for penetration testing tools including network scanning,

Use when building apps that collect user data. Ensures privacy protections are built in from the sta

Provide comprehensive techniques for escalating privileges from a low-privileged user to root/admini

Audit a shipped repo for production-readiness gaps across RLS, webhooks, secrets, grants, Stripe ide

Comprehensive techniques for capturing, analyzing, and documenting network protocols for security re

Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

Implement proven methodologies and tool workflows from top security researchers for effective reconn

Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software an