Find the perfect skill
Web Dependency Security Scan
Security
Scan a deployed website to detect outdated frontend libraries, CMS platforms, and security header misconfigurations. It interactively collects the target URL and scan scope, then triggers a specialized agent to identify known CVEs and generate a detailed security report without requiring source code access.
Export OSCAL
Security
Export NIST OSCAL JSON compliance evidence from an ArangoDB graph for NIST 800-171 and CMMC L2 frameworks.
DNS C2 Operator
Security
Automates DNS C2 operations for sandbox breakout demos. Handles payload generation, session attachment, and command execution.
Scan Specific MCP Skill
Security
Scan a specific MCP skill via npm package name or GitHub URL, detect threats, and present findings.
Telegram Channel Access Management
Security
Manage Telegram channel access: approve pairings, edit allowlists, set DM/group policy.
Find CNetworkGameClientBase_vtable
Security
Fallback agent to locate CNetworkGameClientBase_vtable in the CS2 engine module via IDA Pro MCP and emit a fresh minimal-unique signature artifact.
Podium Webhook Reliability
Security
Operate a Podium webhook receiver hardened against signature forgery, replay attacks, duplicate deliveries, lost events, and timing-attack HMAC compares. Includes idempotency, DLQ, and replay patterns for production reliability.
AI Prompt Engineering Safety Review
Security
Comprehensive analysis and improvement of AI prompts for safety, bias, security, and effectiveness through detailed frameworks and testing methodologies.
Secure Environment Variable Management
Security
Guidance for managing environment variables securely, preventing secret exposure in sessions, logs, and git.
DNS C2 Operator
Security
Automates the DNS C2 attack workflow for the AgentCore sandbox breakout demo. Generate malicious CSV, attach to sessions, and execute commands.
Add Cloudflare Access User
Security
Adds new users to Cloudflare Access by updating authentication policies. Syncs allowed emails to all protected services.
CIS OpenShift 1.3.3: Service Account Private Key
Security
Ensure the --service-account-private-key-file argument is set for the controller manager. Part of the CIS OpenShift benchmark v1.9.0.