Find the perfect skill
Review Semgrep Security Findings
Security
Review and triage semgrep security scan results to identify true positive vulnerabilities with high confidence.
Review Semgrep Findings
Security
Analyze and triage Semgrep security scan results to identify true positive vulnerabilities. Distinguishes real issues from false positives through deep code analysis.
NextAuth.js v5 Authentication
Security
Configure NextAuth.js v5 (Auth.js) authentication with OAuth providers (Google, Discord, GitHub) and Prisma adapter. Use to set up login/logout, protect routes, access user sessions in components, and manage session persistence with database strategy. Helps when adding OAuth providers or troubleshooting authentication issues.
Analyzing API Gateway Access Logs
Security
Detect API attacks like BOLA, rate limit bypass, and injection by parsing API gateway access logs with pandas and statistical analysis.
Web Crawler Workflow
Security
Automated web crawling and reconnaissance workflow that discovers URLs, fingerprints tech stack, scans for vulnerabilities, and extracts structured data.
Security Scan
Security
Run security scans on the codebase at quick, standard, or deep depth using Ruflo security tools. Useful for PR reviews, audits, and pre-deploy checks.
Export NIST OSCAL from ArangoDB
Security
Export NIST OSCAL (Open Security Controls Assessment Language) JSON from compliance evidence stored in ArangoDB. Supports NIST 800-171 and CMMC Level 2 frameworks.
Crypto Tools
Security
Python toolkit for cryptocurrency operations: wallet generation, smart contract exploits, flash loans, and MEV patterns.
Security Review of Backend Financial Systems
Security
Analyze the backend architecture and data persistence layer to identify security vulnerabilities in the handling of financial information.
Software License Analysis
Security
Tools for software authorization analysis: key generation, license bypass, binary patching, and DRM removal.
SIEM Correlation Rules for APT
Security
Write multi-event correlation rules that detect APT lateral movement by chaining Windows authentication, process, and network logs using Splunk SPL and Sigma.
Code Obfuscation & Deobfuscation
Security
Techniques to obfuscate and deobfuscate code: control flow flattening, string encryption, instruction substitution, symbolic execution, and more.