Find the perfect skill
Export NIST OSCAL
Security
Exports NIST 800-171 and CMMC L2 compliance evidence as OSCAL JSON from an ArangoDB graph.
AI Ethics and Fairness Validator
Security
Validate AI/ML models and datasets for bias, fairness, and ethical compliance. Computes fairness metrics (demographic parity, equalized odds) and generates audit reports with mitigation strategies aligned to IEEE, EU, and ACM ethical frameworks.
Embedding Hunt
Security
Uses embedding similarity to hunt for related behaviors across the environment. Starting from a confirmed malicious finding, it discovers behavior clusters, related entities, and variations of known attack patterns. Helps assess incident scope and detect coordinated or widespread threats.
Security Code Review
Security
Reviews code for security risks (auth, injection, IDOR, sensitive data) and provides severity-rated fixes. Responds to security review requests.
Red Team Penetration Testing
Security
Penetration testing and red team assessment skill for authorized engagements. Guides reconnaissance, web app testing, API security, network enumeration, cloud misconfiguration, PoC development, and report generation.
Cryptographic Audit of Applications
Security
Systematic review of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms or hardcoded keys.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations: open databases, storage buckets, auth issues, and exposed cloud functions. For authorized security research only.
CIS OpenShift 1.3.3 Service Account Private Key
Security
Ensures the service account private key file is set for the controller manager as required by CIS OpenShift v1.9.0 control 1.3.3.
Dynamic JavaScript Security Audit
Security
Performs a comprehensive security audit of dynamically loaded JavaScript dependencies in a web application. It scans the codebase for script injection patterns, dynamic imports, third-party scripts, iframes, and service workers, then evaluates supply chain risks, XSS vectors, and best practices like CSP and SRI. Helps developers identify and fix security issues without breaking existing functionality.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations including open databases, storage buckets, auth issues, and exposed cloud functions.
Security Tools and Frameworks Expertise
Security
Expert-level knowledge of cybersecurity tools, frameworks, and platforms including SIEM, vulnerability scanners, penetration testing tools, and security automation. Helps design comprehensive security architectures, select and optimize tools for specific threat landscapes, and build monitoring and incident response capabilities.
Scan Specific MCP Skill
Security
Scan a specific MCP skill by npm package name or GitHub URL to audit for security threats and generate findings.