Find the perfect skill
Differential Security Review
Security
Security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame, calculates blast radius, checks test coverage, and generates a markdown report.
Security PR Reviewer
Security
Security-focused review of an actual diff (PR, branch, commit): hunts authn/authz gaps, injection, secrets, SSRF, mass assignment, and reports severity-ranked findings with evidence and remediation.
SSH Security Audit
Security
Helps navigate the hackingyseguridad/ssha repository for authorized SSH security auditing: identify scripts per CVE, verify authorization, prioritize detection/defense.
CIS OpenShift 1.3.3 Service Account Private Key
Security
Audit OpenShift controller manager's service account private key file configuration against CIS benchmark 1.3.3.
Frontend Security Coder
Security
Secure frontend coding expert focusing on XSS prevention, CSP, and client-side security.
Prowler Compliance Review
Security
Reviews PRs adding or modifying compliance frameworks (CIS, NIST, PCI-DSS) and validates their JSON structure.
SSL/TLS Configuration Validator
Security
Validate and optimize SSL/TLS configurations for web servers, ensuring strong ciphers and proper certificate chains.
Convex Code Reviewer
Security
Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.
Export OSCAL
Security
Export NIST OSCAL JSON of compliance evidence from ArangoDB. Supports NIST 800-171 and CMMC Level 2 frameworks.
Implementing SIEM Correlation Rules for APT
Security
Write multi-event correlation rules to detect APT lateral movement by chaining Windows authentication, process, and network logs using Splunk SPL and Sigma format.
Malware Analyst
Security
Expert malware analyst specializing in defensive research, threat intelligence, and incident response.
Security Auditing & Ethical Hacking
Security
Containerized security auditing and ethical hacking tools. All operations run in isolated Docker containers for safety.