785 skills found · Page 19 of 27
brycewang-stanford / ccs-experimentsUse when designing or auditing ACM CCS experiments, attack demonstrations, adaptive-attack defense evaluations, security measurements, baselines, overhead and cost reporting, ablations, and claim-to-evidence fit, with emphasis on evidence that survives an adversarial program committee rather than le…
brycewang-stanford / ccs-related-workUse when positioning an ACM CCS submission against the security big-four and specialist literature, including arXiv preprints, prior CCS/S&P/USENIX/NDSS papers, concurrent disclosures, CVE and advisory records, and the attack-and-defense lineage that a SIGSAC program committee expects to see credite…
brycewang-stanford / ccs-supplementaryUse when preparing ACM CCS appendices and supplementary material, including the ethics considerations appendix, protocol transcripts, formal proofs, measurement tables, and anonymized supporting material under the 12-page body limit, anonymity, and reviewer-discretion constraints for a security pape…
brycewang-stanford / ccs-topic-selectionUse when deciding whether a security project fits ACM CCS versus IEEE S&P, USENIX Security, NDSS, PETS, or a crypto/theory venue, identifying the security contribution type, and sharpening the threat model and attacker capability before writing begins.
brycewang-stanford / ccs-workflowUse when planning an ACM CCS project timeline across the two HotCRP review cycles, from venue fit through abstract registration, full-paper upload, rebuttal, notification, revision, artifact evaluation, ACM camera-ready, and in-person presentation, with backward-planning offsets and the security big…
brycewang-stanford / ccs-writing-styleUse when revising an ACM CCS paper for a precise threat model, calibrated attack/defense claims, 12-page ACM sigconf compression, double-blind wording, adaptive-evaluation honesty, and the security house style that survives an adversarial SIGSAC program committee.
dpearson2699 / ios-simulatorManages iOS Simulator devices and app tests with xcrun simctl: lifecycle, install/launch, push and location simulation, privacy permissions, deep links, status-bar overrides, screenshots/video, log streaming, app containers, and targetEnvironment(simulator)
dpearson2699 / swift-securityUse when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face ID, Touch ID), CryptoKit (AES-GCM, ChaChaPoly, ECDSA, ECDH, HPKE, ML-KEM), Secure Enclave, secure credential storage (OAuth tokens, API keys), certificate pinnin…
TencentCloudBase / minimal-web-baas-demoFast path for a minimal CloudBase Web + database demo (最小前后端 / 最小可用 fullstack / Lovable-like BaaS). Defaults to @cloudbase/js-sdk client CRUD (NoSQL app.database / PG app.rdb), MCP-only schema, preview-first, and forbids cloud functions unless secrets, cron/background jobs, or logic that security ru…
TencentCloudBase / cloudbaseUse this skill when you develop, design, build, deploy, debug, migrate, or troubleshoot CloudBase (腾讯云开发, 云开发, TCB, 微信云开发) projects — Web, 微信小程序, 小程序, uni-app, mobile (iOS, Android, Flutter, React Native).
TencentCloudBase / codebase-auditPerform a full codebase review, categorize findings by severity, file GitHub issues, then fix each issue in an isolated git worktree and submit PRs.
BagelHole / ebpf-observabilityUse eBPF for deep kernel-level observability — trace syscalls, network flows, and application behavior without code changes using Cilium, Tetragon, and bpftrace.
BagelHole / mdm-device-managementManage and secure company devices with MDM solutions — enroll macOS, Windows, iOS, and Android devices, enforce security policies, and automate software deployment
BagelHole / saas-security-postureAudit and harden your SaaS tool stack — enforce SSO, review OAuth grants, manage shadow IT, and secure admin accounts across Slack, GitHub, Google Workspace, and AWS
BagelHole / multi-tenant-llm-hostingDesign secure, multi-tenant LLM hosting platforms with tenant isolation, quotas, billing attribution, noisy-neighbor protection, and per-tenant policy controls.
BagelHole / ai-red-teamingRun structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.
BagelHole / mcp-server-securitySecure Model Context Protocol (MCP) servers with transport encryption, tool authorization, input validation, and audit logging for safe AI agent integrations.
BagelHole / model-supply-chain-securitySecure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and trusted model promotion.
BagelHole / windows-hardeningHarden Windows servers per security baselines and CIS benchmarks. Configure Group Policy, Windows Defender, and security features
BagelHole / incident-responseHandle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery processes
BagelHole / ai-security-hardeningHarden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks. Covers input validation, output filtering, access control, model API security, and compliance controls for production AI systems.
BagelHole / zero-trustImplement zero-trust network architecture. Configure identity-based access, micro-segmentation, and continuous verification
BagelHole / container-scanningScan container images for vulnerabilities using Trivy, Grype, and cloud-native tools. Identify security issues in base images, packages, and configurations
BagelHole / dast-scanningPerform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto. Test running applications for security vulnerabilities through automated and manual testing
BagelHole / sast-scanningPerform static application security testing with tools like Semgrep, CodeQL, and SonarQube. Identify security vulnerabilities in source code before deployment
BagelHole / vulnerability-scanningScan systems and dependencies for CVEs and security vulnerabilities. Use tools like Nessus, OpenVAS, and Qualys to identify and prioritize vulnerabilities
BagelHole / kubernetes-hardeningImplement Kubernetes security contexts, Pod Security Standards, and network policies. Secure cluster components and workloads
BagelHole / linux-hardeningApply CIS benchmarks and secure Linux servers. Configure SSH, manage users, implement firewall rules, and enable security features
BagelHole / security-automationAutomate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities
BagelHole / openclaw-deployment-hardeningSecure OpenClaw deployments with preflight hardening checks, CI/CD guardrails, container runtime restrictions, and post-deploy verification