Find the perfect skill
Create Reusable Skill from Custom Approach
Security
Guides turning a custom security testing approach into a reusable skill, covering parameter definition, pattern extraction, and validation.
Post-exploitation
Security
Executable Python tools for post-exploitation operations: privilege escalation, persistence, lateral movement, and credential harvesting.
Slack Access Control
Security
Manage Slack channel access control: pairing codes, allowlist, and channel opt-in for Claude Code sessions.
Implementing SIEM Correlation Rules for APT
Security
Write multi-event correlation rules to detect APT lateral movement by chaining Windows authentication, process, and network logs using Splunk SPL and Sigma format.
CTF Here
Security
Set competition context for the current challenge directory. Initializes .ctf/ folder, detects files, guesses category, and saves metadata.
Supply Chain Risk Auditor
Security
Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface.
Password Strength Analyzer
Security
Automated assistance for password strength analysis, covering authentication, input validation, and secure coding practices.
PII Detection
Security
Detect and flag personally identifiable information (PII) in text, code, and configurations before committing, logging, or storing data.
Firebase APK Security Scanner
Security
Scans Android APKs for Firebase misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.
Card/Key Generation
Security
Workflow for generating and verifying keys, cards, and CD-keys with format analysis and algorithms.
AI Prompt Engineering Safety Review
Security
Comprehensive analysis and improvement of AI prompts for safety, bias, security, and effectiveness.
Ensure service-account-private-key-file is set
Security
CIS control 1.3.3: Verify the service-account-private-key-file argument is set for OpenShift controller manager.