Find the perfect skill
Subdomain Enumeration with Subfinder
Security
Enumerate subdomains of target domains using ProjectDiscovery's Subfinder passive reconnaissance tool to map the attack surface during security assessments.
Set service-account-private-key-file appropriately
Security
Ensure the controller manager has --service-account-private-key-file set to the correct key file for signing service account tokens.
Defense Evasion Toolkit
Security
Executable Python tools for defense evasion: AMSI bypass, ETW patch, payload packing and obfuscation.
Frontend Security Coder
Security
Expert in secure frontend coding: XSS prevention, output sanitization, and client-side security patterns.
Frontend Security Coder
Security
Expert in secure frontend coding, XSS prevention, CSP implementation, and safe DOM manipulation. Use for writing security-first client-side code.
Threat Modeling Expert
Security
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction.
ClawGuard Security Layer
Security
Intercepts shell commands, file operations, and network requests before execution, enforcing a customizable security policy. Actions can be automatically allowed, blocked, or held for human approval. Use it to prevent accidental or malicious changes to your system.
CIS OpenShift 1.3.3 - Service Account Private Key
Security
CIS control for OpenShift: verify that the --service-account-private-key-file argument is set for the controller manager.
Scan a Specific MCP Skill
Security
Scan a specific MCP skill by npm package name or GitHub URL for security threats. Reports findings with plain-language consequences and ATR rules triggered.
Scan Specific MCP Skill
Security
Audit a single MCP skill package by npm name or GitHub URL, detect threats, and report findings with ATR rules.
Export OSCAL compliance evidence
Security
Exports compliance evidence from an ArangoDB graph as NIST OSCAL JSON (800-171, CMMC L2), with dry-run mode and file validation.
Access Control Auditor
Security
Audit access control implementations for security vulnerabilities and misconfigurations. Use when reviewing authentication and authorization.