983 skills found · Page 29 of 33
Masriyan / 07-incident-responseIR playbook execution, evidence collection, forensic timeline analysis,
Masriyan / 08-network-securityNetwork traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall
Masriyan / 09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
Masriyan / 10-cloud-securityAWS/Azure/GCP security auditing, container and Kubernetes hardening,
Masriyan / 12-log-analysisSecurity log parsing, anomaly detection, SIEM query building, Sigma rule
Masriyan / 13-crypto-analysisSSL/TLS auditing, cipher suite analysis, hash algorithm identification,
Masriyan / 14-red-team-opsAuthorized red team engagement planning, C2 architecture design, attack
Masriyan / 15-blue-team-defenseSystem hardening, detection engineering, security baseline monitoring,
Masriyan / 22-purple-teamCollaborative purple-team operations — threat-informed adversary emulation
notque / kubernetesKubernetes operations: debugging, security, RBAC, and infrastructure tooling.
notque / reviewCode review: systematic single-file, parallel multi-reviewer, full-repo audit, PR diff review.
Masriyan / 01-recon-osintPassive and active reconnaissance, subdomain enumeration, DNS analysis,
Masriyan / 02-vulnerability-scannerDependency auditing, CVE detection, configuration security review, CVSS
Masriyan / 16-ai-llm-securityLLM and AI application security testing — prompt injection, jailbreak
Masriyan / 19-grc-complianceGovernance, risk, and compliance — risk assessment and scoring, control
Masriyan / 20-supply-chain-securitySoftware supply chain security — SBOM generation and analysis, dependency
Masriyan / 21-threat-intelligenceCyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment,
jabrena / 112-java-maven-pluginsUse when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchma…
notque / cve-source-checkAudit CVE/vulnerability source coverage for a technology stack. Maps each component (container, library, base image, runtime) to authoritative CVE feeds, flags gaps, and produces audit-ready reports. Generic: works for any service or stack.
notque / researchResearch: structured investigation, fact-checking, explanation traces.
notque / securitySecurity: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.
Masriyan / 17-mobile-securityAndroid and iOS application security testing — static and dynamic analysis,
Masriyan / 18-ot-ics-securityOperational Technology and industrial control system security — Purdue
jabrena / 812-regulations-eu-product-liability-directiveUse when reviewing, designing, or modifying Java enterprise software products, AI-enabled products, RAG assistants, AI agents, generated instructions, related services, automated updates, vulnerability handling, corrective updates, warnings, instructions, or product-safety evidence under Directive (…
notque / workflowStructured work: multi-phase tasks, feature builds, planning, objective loops, hill climbing.
jabrena / 804-regulations-eu-nis2Use when reviewing, designing, or modifying Java enterprise systems from a maintainer-authored or maintainer-sanitized NIS2 engineering evidence inventory.
jabrena / 805-regulations-eu-cyber-resilience-actUse when reviewing, designing, or modifying Java enterprise products, services, libraries, agents, plugins, connected components, or platform modules that may qualify as products with digital elements and need EU Cyber Resilience Act secure-by-design, vulnerability handling, security update, SBOM, p…
jabrena / 814-regulations-iso-25010Use when reviewing, designing, or modifying Java enterprise systems and need a structured, repeatable ISO/IEC 25010:2023 quality-attribute review covering Functional Suitability, Performance Efficiency, Compatibility, Interaction Capability, Reliability, Security, Maintainability, Flexibility, and S…
notque / deployDeploy and infrastructure: web deploy, dev branches, cron, package install, shell configuration.
aiskillstore / vibe-securitySecurity intelligence for code analysis. Detects SQL injection, XSS, CSRF, authentication issues, crypto failures, and more. Actions: scan, analyze, fix, audit, check, review, secure, validate, sanitize, protect. Languages: JavaScript, TypeScript, Python, PHP, Java, Go, Ruby.
