Find the perfect skill
Performing Cryptographic Audit of Application
Security
Systematically review an application's cryptographic usage to identify weak algorithms, hardcoded keys, insecure modes, and protocol misconfigurations. Build an automated scanner for Python and config files.
Threat Modeling Discipline
Security
Disciplined threat modeling loop for software architectures and APIs. Map assets, apply STRIDE, classify impact, and recommend mitigations.
Export OSCAL Compliance Evidence
Security
Exports compliance evidence as NIST OSCAL JSON from an ArangoDB graph, supporting NIST 800-171 and CMMC Level 2 frameworks.
NIST OSCAL Export from Compliance Evidence
Security
Export NIST OSCAL assessment-results JSON from compliance evidence in ArangoDB. Supports NIST 800-171 and CMMC L2 with dry-run and validation.
Malware Analyst
Security
Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis and malware family identification.
Anti-Reversing Techniques
Security
Dual-use security skill for analyzing protected binaries and understanding protections, with mandatory authorization gate.
DAO Governance Attack
Security
Analyze and exploit DAO governance vulnerabilities including flash-loan vote manipulation, delegation hijack, quorum dilution, and time-lock bypass.
CIS OpenShift 1.3.3 - Service Account Private Key
Security
CIS benchmark check for OpenShift: ensure the service account private key file is set for the controller manager. Includes audit procedure and impact.
CIS OpenShift 1.3.3 - Service Account Private Key
Security
Ensures the --service-account-private-key-file argument is set for the controller manager as per the CIS OpenShift benchmark.
Network Reconnaissance
Security
Helps a pentester perform network reconnaissance and service enumeration: host discovery, port scanning, OS fingerprinting, and port/service mapping.
Security Bounty Hunter
Security
Hunt for exploitable, bounty-worthy security issues in repositories, focusing on remotely reachable vulnerabilities for real reports.
Have I Been Clawned?
Security
Open source security audit for OpenClaw agents. 72 checks, verified findings, OWASP-mapped.