Find the perfect skill
Analyzing Threat Landscape with MISP
Security
Query a MISP instance to compute event statistics, IOC type breakdowns, threat actor clusters, and tag trends; generate threat landscape reports with temporal trends.
Python Jail Escape
Security
Escape Python sandbox restrictions. Use when working with restricted Python eval/exec environments, sandbox escapes, or Python jail challenges.
Harness MCP Security Scan
Security
Static security scan of declared MCP servers and tools via harness mcp-scan. Flags policy, permission, and dependency issues with configurable fail-on severity.
Attack Tree Construction
Security
Build comprehensive attack trees to visualize threat paths, identify defense gaps, and communicate security risks to stakeholders.
Analyzing Network Flow Data with Netflow
Security
Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing using the Python netflow library.
Complete Reverse Engineering Workflow
Security
Automated workflow for binary analysis: compiler detection, unpacking, disassembly, and report generation.
CIS OpenShift 1.3.3 Service Account Private Key
Security
Audit OpenShift controller manager's service account private key file configuration against CIS benchmark 1.3.3.
Content Security Policy Generator
Security
Generate and test Content Security Policy headers to prevent XSS and data injection attacks.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, auth issues, and exposed cloud functions.
OPPLAN Converter: CONOPS to Ralph Loop Format
Security
Convert engagement documents into machine-readable OPPLAN for the ralph loop — objective decomposition, acceptance criteria, MITRE mapping, priority ordering.
Export NIST OSCAL from ArangoDB
Security
Export NIST OSCAL (Open Security Controls Assessment Language) JSON from compliance evidence stored in ArangoDB. Supports NIST 800-171 and CMMC Level 2 frameworks.
Secrets Scanner and Rotator
Security
Detect hardcoded secrets in code, suggest proper secret management, and help rotate compromised credentials.