Find the perfect skill
Safety Audit
Security
Systematic safety audit for Rust codebases: unsafe blocks, memory leaks, undefined behavior, and Vulkan spec violations.
SIEM Correlation Rules for APT Detection
Security
Create multi-event correlation rules using Splunk SPL and Sigma to detect APT lateral movement by chaining Windows event logs across hosts.
Threat Modeling
Security
Disciplined threat modeling for software architectures and APIs. Map assets, apply STRIDE, classify impact, mitigate. All responses in Portuguese.
GDPR Data Handling
Security
Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls.
Cryptographic Application Audit
Security
Systematically reviews an application's cryptographic usage to identify vulnerabilities like weak algorithms, hardcoded keys, and insecure protocols. Builds an automated scanner for Python and config files.
Scan Specific MCP Skill
Security
Scans a specific MCP skill (npm package or GitHub URL) for security threats and generates plain-language findings.
RBAC Permission System Designer
Security
Design and implement role-based access control systems with fine-grained permissions and policy enforcement.
Supply Chain Risk Auditor
Security
Evaluates project dependencies for high-risk factors like single maintainers, unmaintained status, low popularity, high-risk features, and past CVEs.
Backend Security Coder
Security
Expert in secure backend coding practices specializing in input validation, authentication, and API security.
HTTP Request Smuggling
Security
Provides a methodology for detecting and exploiting HTTP request smuggling vulnerabilities, including CL.TE, TE.CL, and TE.TE variants, as well as HTTP/2 smuggling. Helps identify desynchronizations between front-end and back-end servers to bypass WAFs, poison caches, or hijack credentials.
Export NIST OSCAL JSON from compliance
Security
Exports compliance evidence (NIST 800-171, CMMC L2) from ArangoDB to OSCAL JSON. Includes validation and dry-run mode.
CIS OpenShift: Service Account Private Key
Security
Ensure the OpenShift controller manager has the service account private key file set correctly, as per CIS benchmark control 1.3.3.