Find the perfect skill
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.
Review Semgrep Security Findings
Security
Analyze and triage Semgrep scan results to identify true positive vulnerabilities and filter out false positives.
Windsurf Audit Logging
Security
Configure AI interaction audit logging for compliance (SOC 2, ISO 27001, HIPAA) with SIEM integrations and alerts.
CIS OpenShift 1.3.3: Service Account Private Key File
Security
Ensure the --service-account-private-key-file argument is set appropriately in the OpenShift Controller Manager per CIS benchmark 1.3.3.
Access Control Manager
Security
Audits user access permissions across cloud services, SaaS applications, and internal systems to enforce least-privilege principles. Connects to identity providers like Okta, Auth0, and AWS IAM to identify over-privileged accounts, unused access rights, and stale users. Generates access review reports and prioritized remediation playbooks.
Security Review for Convex and AI Code
Security
Security review checklist for Convex functions, auth logic, public queries, webhooks, and AI-generated code.
Password Strength Analyzer
Security
Security fundamentals skill for analyzing and enforcing password strength, including validation and secure coding practices.
CIS OpenShift 1.3.3: Service Account Private Key File
Security
Ensure that the --service-account-private-key-file argument is set appropriately for the controller manager in OpenShift.
Global Validation
Security
Implement comprehensive input validation on both client and server sides with clear error feedback. Use this skill when validating user input in forms, API endpoints, or data processing to ensure data integrity, security, and consistent error messaging across all application entry points.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations: open databases, storage, auth issues, exposed cloud functions. For authorized security testing.
Performing Cryptographic Audit of Application
Security
Systematically review an application's cryptographic usage to identify weak algorithms, hardcoded keys, insecure modes, and protocol misconfigurations. Build an automated scanner for Python and config files.
Threat Modeling Discipline
Security
Disciplined threat modeling loop for software architectures and APIs. Map assets, apply STRIDE, classify impact, and recommend mitigations.