Find the perfect skill
Hardened Contact Form for WordPress
Security
Install a production-hardened contact form with 9-layer defense (CSRF, honeypot, timing, etc.) into a WordPress/Sage/Acorn theme.
Malware Static Analysis
Security
Perform static analysis and triage of suspicious files without execution. Extract hashes, strings, metadata, PE/ELF headers, URLs, and indicators.
Binary Exploitation (Pwn)
Security
Solve CTF binary exploitation (pwn) challenges: buffer overflows, format strings, ROP chains, heap exploitation, and shellcoding.
Export NIST OSCAL from Compliance
Security
Export NIST OSCAL JSON from compliance evidence stored in ArangoDB. Supports NIST 800-171 and CMMC Level 2 frameworks.
Building Cloud SIEM with Sentinel
Security
This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations.
Set Service Account Private Key File
Security
Explicitly set a service account private key file for service accounts on the controller manager to allow key rotation.
Security & Compliance Guardian
Security
Establish comprehensive security scanning and compliance infrastructure: CodeQL analysis, Dependabot, secret detection, and dependency review.
Containerized Security Auditing and Ethical Hacking
Security
Containerized security auditing and ethical hacking tools. All operations run in isolated Docker containers for safety.
Malware Analyst
Security
Expert malware analyst specializing in defensive research, threat intelligence, and incident response.
Scan Specific MCP Skill
Security
Audit a specific MCP skill from npm or GitHub for security threats using ATR rules, with plain-language findings and optional post generation.
Safety Audit for Unsafe Rust Code
Security
Safety audit for Rust code: identifies unsafe block issues, FFI lifetime violations, memory leaks, UB, and Vulkan spec violations. Uses severity anchors and structured dimensions.
Review Semgrep Security Findings
Security
Review and triage Semgrep security scan results to identify true positive vulnerabilities. Performs deep code analysis to distinguish real vulnerabilities from false positives.