Find the perfect skill
Compliance Mapping to Security Frameworks
Security
Maps threats and controls to compliance frameworks like OWASP Top 10, SOC2, PCI-DSS, HIPAA, and GDPR. Generates compliance reports with coverage percentages and identifies gaps. Use when checking compliance status, mapping to security frameworks, or generating audit documentation.
Outbound Interaction & OOB Detection
Security
Security assessment skill focused on verifying outbound interactions and out-of-band (OOB) validation. Used for testing SSRF, blind XSS, XXE/OOB, webhook abuse, or DNS/HTTP callback correlation. It enables reliable confirmation of asynchronous server-side behavior through unique tokens, timestamp correlation, and noise filtering.
Building Cloud SIEM with Sentinel
Security
Deploy Microsoft Sentinel as a cloud-native SIEM/SOAR. Configure multi-cloud data connectors, write KQL queries, automate response with Logic Apps, and perform petabyte-scale threat hunting.
Convex Security Check
Security
Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations including open databases, exposed storage, auth issues, and cloud functions. For authorized security testing.
Containerized Security Auditing
Security
Containerized security auditing and ethical hacking tools. Perform network scans, SAST/SCA, and isolated exploit execution in Docker.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase security misconfigurations (open databases, storage buckets, auth issues, exposed cloud functions). For authorized mobile security audits.
Analyzing Network Flow Data with NetFlow
Security
Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns. Uses the Python netflow library to decode flow records and apply statistical analysis.
AI Prompt Engineering Safety Review
Security
Comprehensive framework for analyzing and improving AI prompts, focusing on safety, bias, security, and effectiveness.
Performing Cryptographic Audit of Application
Security
Systematic cryptographic audit of applications to identify vulnerabilities in weak algorithms, insecure modes, hardcoded keys, and protocol misconfigurations.
1Password Secrets Management
Security
Enables management of 1Password secrets via the op CLI, using service account authentication. Use it to list vaults and items, retrieve passwords, OTP codes, and API keys, or read specific secret fields. Ideal for securely accessing credentials during development or automation workflows.
Kubernetes Security Policies
Security
This skill covers implementing Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use it to enforce network segmentation, configure pod security standards, or set up least-privilege access controls.