Find the perfect skill
Homelab VLAN Segmentation
Security
Guide to segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik. Covers trunk config, firewall rules, and SSID mapping.
Podium Webhook Reliability
Security
Harden a Podium webhook receiver: HMAC signature verification, replay protection, idempotency, dead-letter queue, and safe replay.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations including open databases, storage buckets, auth issues, and exposed cloud functions.
Dependency Cooldown Security
Security
Adds a cooldown period before installing new package versions to mitigate supply chain attack risks.
Spring Authorization Server
Security
Quick reference for building an OAuth 2.1 and OpenID Connect authorization server with Spring Authorization Server.
CIS OCP 1.3.3 - Service Account Private Key
Security
Ensure the controller manager uses a separate private key file for service account tokens to allow key rotation. Manual audit procedure for OpenShift.
SSH Security Audit
Security
Helps navigate the hackingyseguridad/ssha repository for authorized SSH security auditing: identify scripts per CVE, verify authorization, prioritize detection/defense.
Deployment Inventory Resolver
Security
Resolve a deployment_id into the artifacts that make up an agentic deployment and build the evidence graph for attestation. Use first before any control is evaluated.
Firebase APK Scanner
Security
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.
Containerized Security Auditing & Ethical Hacking
Security
Security auditing and ethical hacking tools running in isolated Docker containers, including network scanning, SAST, SCA, and exploit execution.
Scan Specific MCP Skill
Security
Scans a specific MCP skill by npm package name or GitHub URL to detect security threats.
Security Code Review
Security
Reviews security vulnerabilities and suggests fixes. Detects auth issues, SQL injection, sensitive data exposure, and more.