Find the perfect skill
Backend Security Coder
Security
This skill provides expert guidance on secure backend coding practices, including input validation, authentication, API security, and vulnerability prevention. It is designed for hands-on implementation of security features and code reviews, focusing on writing secure code rather than auditing existing systems. Use it when building or reviewing backend components that require robust security measures.
Threat Modeling Expert
Security
Expert in threat analysis and security architecture review. Masters STRIDE, PASTA, and attack trees to design secure systems.
Vulnerability Scanning with Tekton and Trivy
Security
Generate a Tekton Task that uses Trivy to scan a container image for critical and high vulnerabilities, failing the pipeline if any are found. The task takes the image name as a parameter and runs the trivy command with exit code 1. Useful for integrating vulnerability scanning into CI/CD pipelines built with Tekton.
Export NIST OSCAL JSON
Security
Exports NIST OSCAL assessment-results JSON from compliance evidence in ArangoDB graph. Supports NIST 800-171 and CMMC Level 2.
Multi-Agent Parallel Web Pentest
Security
AI-powered web penetration testing skill with parallel multi-agent architecture. Covers fingerprinting, scanning, credential extraction, crawling, parallel exploitation, attack chain analysis, and JSON report generation.
Analyzing API Gateway Access Logs
Security
Parses API Gateway access logs to detect BOLA/IDOR attacks, rate limit bypass, credential scanning, and injection attempts. Uses pandas for statistical analysis and anomaly detection.
Threat Modeling Expert
Security
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction.
Eric Zimmerman Tools for Windows Artifact Analysis
Security
Learn to analyze Windows artifacts using Eric Zimmerman's open-source tools (KAPE, MFTECmd, PECmd) to examine registry hives, prefetch files, and event logs.
Frontend Security Coder
Security
Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, auth issues, and exposed cloud functions. For authorized security research.
Containerized Security Auditing & Ethical Hacking
Security
Containerized security auditing and ethical hacking tools. All operations run in isolated Docker containers for safety.
Export OSCAL
Security
Export NIST OSCAL JSON compliance evidence from an ArangoDB graph for NIST 800-171 and CMMC L2 frameworks.