Find the perfect skill
Testing for Broken Access Control
Security
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
Web Crawler Workflow
Security
Automated web crawling and reconnaissance workflow that discovers URLs, fingerprints tech stack, scans for vulnerabilities, and extracts structured data.
Frontend Security Coder
Security
Expert in secure frontend coding: XSS prevention, CSP, safe DOM manipulation, and protection against client-side attacks.
Secrets Management
Security
Implement secure secrets management for CI/CD pipelines using tools like HashiCorp Vault, AWS Secrets Manager, or native platform solutions. This skill covers storing and rotating sensitive credentials such as API keys and database passwords, integrating retrieval into CI pipelines, and following least-privilege access principles.
Security Vulnerability Review
Security
Reviews code for security vulnerabilities including authentication, injection, data exposure, etc. and provides fix recommendations.
Security Scan
Security
Run security scans on the codebase at quick, standard, or deep depth using Ruflo security tools. Useful for PR reviews, audits, and pre-deploy checks.
Scan Specific MCP Skill
Security
Scan a specific MCP skill by npm package name or GitHub URL for security threats.
CIS OpenShift 1.3.3: Service Account Private Key
Security
Verifies that the Kubernetes controller manager has the service-account-private-key-file argument set correctly in OpenShift, as required by CIS benchmark control 1.3.3.
Crypto Tools
Security
Python toolkit for cryptocurrency operations: wallet generation, smart contract exploits, flash loans, and MEV patterns.
Cryptographic Application Audit
Security
Systematically reviews an application's cryptographic usage to identify vulnerabilities like weak algorithms, hardcoded keys, and insecure protocols. Builds an automated scanner for Python and config files.
IoM Automated Penetration Test
Security
Automated penetration testing using IoM C2 MCP tools. Covers reconnaissance, privilege escalation, credential harvesting, lateral movement, and persistence.
Kubernetes Security Policies
Security
This skill covers implementing Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use it to enforce network segmentation, configure pod security standards, or set up least-privilege access controls.