Find the perfect skill
Prism Scanner - Security Scanner
Security
Security scanner for AI agent skills, plugins, and MCP servers. Detects malicious code and security risks.
Analyzing Network Flow Data with Netflow
Security
Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns.
Analyzing Network Flow Data with Netflow
Security
Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns using the Python netflow library.
Analyzing API Gateway Access Logs
Security
Parses API Gateway access logs to detect BOLA/IDOR, rate limit bypass, credential scanning, and injection attempts using pandas for anomaly detection.
Implementing SIEM Correlation Rules for APT
Security
Write multi-event correlation rules to detect APT lateral movement using Windows event logs, Splunk SPL, and Sigma rules. Chains authentication, process execution, and network telemetry across hosts within sliding time windows.
Testing for Broken Access Control
Security
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
API Gateway Access Log Analysis
Security
Detect API attacks like BOLA, credential scanning, and injection from gateway access logs using Python analysis.
Attack Tree Construction
Security
Build comprehensive attack trees to visualize threat paths, identify defense gaps, and communicate security risks to stakeholders.
Testing for Broken Access Control
Security
Systematically testing web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
DeFi AMM Security
Security
Security checklist for Solidity AMM contracts covering reentrancy, donation attacks, oracle manipulation, and more. Use when auditing or writing liquidity pool or swap code.
Security Bounty Hunter
Security
Hunt for exploitable, remotely reachable vulnerabilities for bug bounty programs. Filters out low-signal findings and focuses on issues with real impact.
Analyzing Kubernetes Audit Logs
Security
Parses Kubernetes API server audit logs to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds SIEM detection rules from event patterns for investigating cluster compromise.