Find the perfect skill
CIS OpenShift 1.3.3 - Service Account Private Key
Security
Ensure the OpenShift controller manager uses a service account private key file for token signing, as per CIS benchmark 1.3.3.
Frontend Security Coder
Security
Expert in secure frontend coding: XSS prevention, output sanitization, CSP, and safe DOM manipulation for security-first client-side applications.
Performing File Carving with Foremost
Security
Recover files from disk images and unallocated space using Foremost's header-footer signature carving to extract evidence regardless of file system state.
Advanced File Finder with Extraction
Security
Analyze firmware files, detect file types, and extract ext2/3/4 or F2FS filesystems for security analysis.
Command Injection to RCE Proof
Security
Turn suspected OS command injection into proof of remote code execution via an OAST callback, then demonstrate a safe follow-on impact like reading a file.
Podium Webhook Reliability
Security
Harden a Podium webhook receiver: HMAC signature verification, replay protection, idempotency keys, and a dead-letter queue with replay for failed events.
CSO Security Audit Mode
Security
Comprehensive security audit (infrastructure, dependencies, CI/CD, OWASP, STRIDE) with daily and deep scan modes. Includes secrets archaeology and LLM/AI security checks.
Frontend Security Coder
Security
Expert in secure frontend coding, XSS prevention, output sanitization, and client-side security patterns. Use for secure frontend implementations and code reviews.
Threat Modeling for Architectures
Security
Disciplined threat modeling loop for software architectures and APIs: map assets, apply STRIDE, classify impact, and recommend mitigations. All responses must be in Portuguese.
PII Detection
Security
Detect and flag personally identifiable information (PII) in text, code, and configurations before sharing or storing.
Hanko Auth Integration Reference
Security
A reference for integrating self-hosted Hanko authentication using Docker Compose, with frontend and backend setup including JWT verification.
Frontend Security Coder
Security
Expert in secure frontend coding: XSS prevention, output sanitization, and client-side security patterns.