Find the perfect skill
CIS OpenShift: Service Account Private Key
Security
Ensure the OpenShift controller manager has the service account private key file set correctly, as per CIS benchmark control 1.3.3.
Convex Security Review
Security
Security checklist for Convex functions, auth, public queries, webhooks, uploads, and AI-generated code. Use when reviewing code that handles user data or PII.
Penetration Testing Practical Skills
Security
Full penetration testing workflow: information gathering, vulnerability discovery (3 tiers, 9+3+6 types), exploitation, post-exploitation, and evasion. Triggered on specific targets with offensive intent.
OWASP Security Checker
Security
Audit code against OWASP Top 10 vulnerabilities including XSS, SQL injection, CSRF, and authentication flaws.
Export NIST OSCAL JSON from Compliance
Security
Export NIST OSCAL JSON from compliance evidence in ArangoDB. Supports NIST 800-171 and CMMC Level 2.
Security Scanning and Hardening
Security
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
CTF Cryptography
Security
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, and other crypto problems.
Export NIST OSCAL Compliance Evidence
Security
Exports NIST OSCAL JSON compliance evidence from an ArangoDB graph. Supports NIST 800-171 and CMMC Level 2 frameworks.
Cryptographic Audit of Applications
Security
Systematically review an application's cryptographic implementation to detect weak algorithms, insecure modes, hardcoded keys, and protocol misconfigurations. Build an automated scanner for Python and configuration files.
Spring Authorization Server
Security
Quick reference for Spring Authorization Server to build OAuth 2.1 and OpenID Connect providers. Covers dependencies, authorization code flow configuration, and client registration.
Firebase APK Scanner
Security
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations including open databases, storage buckets, weak authentication, and exposed cloud functions.