Find the perfect skill
Web fuzzing with ffuf
Security
Skills for web fuzzing using ffuf.
Secure Environment Variable Management
Security
Guidance for managing environment variables securely, preventing secret exposure in sessions, logs, and git.
BREAK Business Risk Knowledge Base
Security
Queries a knowledge base of business security risks, avoidance methods, attack tools, threat actors, terms, and cases to answer business security questions.
Static Application Security Testing (SAST)
Security
Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages and frameworks.
API Security Hardening
Security
Harden API endpoints with rate limiting, input validation, CORS, and proper error handling to prevent abuse.
Containerized Security Auditing & Ethical Hacking
Security
Perform security audits and ethical hacking in isolated Docker containers. Includes network scanning, SAST, SCA, and isolated exploit execution.
Export NIST OSCAL JSON
Security
Export NIST OSCAL JSON compliance evidence from an ArangoDB graph, supporting NIST 800-171 and CMMC Level 2.
Threat Modeling Expert
Security
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction.
Safety Audit
Security
Systematic safety audit for Rust codebases: unsafe blocks, memory leaks, undefined behavior, and Vulkan spec violations.
Security PR Reviewer
Security
Security-focused review of an actual diff (PR, branch, or staged changes) hunting authn/authz gaps, injection, unsafe deserialization, secrets, SSRF, mass assignment, etc. Reports severity-ranked findings with evidence and exploit scenarios.
Insecure Deserialization Checker
Security
Validates insecure deserialization checker operations with automated vulnerability detection. Auto-activating skill for Security Fundamentals covering secure coding practices.
Secrets Scanner and Rotator
Security
Detect hardcoded secrets in code, suggest proper secret management, and help rotate compromised credentials.