785 skills found · Page 24 of 27
Masriyan / 08-network-securityNetwork traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall
Masriyan / 09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
Masriyan / 10-cloud-securityAWS/Azure/GCP security auditing, container and Kubernetes hardening,
Masriyan / 12-log-analysisSecurity log parsing, anomaly detection, SIEM query building, Sigma rule
Masriyan / 13-crypto-analysisSSL/TLS auditing, cipher suite analysis, hash algorithm identification,
Masriyan / 14-red-team-opsAuthorized red team engagement planning, C2 architecture design, attack
Masriyan / 15-blue-team-defenseSystem hardening, detection engineering, security baseline monitoring,
Masriyan / 22-purple-teamCollaborative purple-team operations — threat-informed adversary emulation
Masriyan / 01-recon-osintPassive and active reconnaissance, subdomain enumeration, DNS analysis,
Masriyan / 02-vulnerability-scannerDependency auditing, CVE detection, configuration security review, CVSS
Masriyan / 16-ai-llm-securityLLM and AI application security testing — prompt injection, jailbreak
Masriyan / 19-grc-complianceGovernance, risk, and compliance — risk assessment and scoring, control
Masriyan / 20-supply-chain-securitySoftware supply chain security — SBOM generation and analysis, dependency
Masriyan / 21-threat-intelligenceCyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment,
jabrena / 112-java-maven-pluginsUse when you need to add or configure Maven plugins in your pom.xml — including quality tools (enforcer, surefire, failsafe, jacoco, pitest, spotbugs, pmd), security scanning (OWASP), code formatting (Spotless), version management, container image build (Jib), build information tracking, and benchma…
Masriyan / 17-mobile-securityAndroid and iOS application security testing — static and dynamic analysis,
Masriyan / 18-ot-ics-securityOperational Technology and industrial control system security — Purdue
jabrena / 804-regulations-eu-nis2Use when reviewing, designing, or modifying Java enterprise systems from a maintainer-authored or maintainer-sanitized NIS2 engineering evidence inventory.
jabrena / 805-regulations-eu-cyber-resilience-actUse when reviewing, designing, or modifying Java enterprise products, services, libraries, agents, plugins, connected components, or platform modules that may qualify as products with digital elements and need EU Cyber Resilience Act secure-by-design, vulnerability handling, security update, SBOM, p…
jabrena / 814-regulations-iso-25010Use when reviewing, designing, or modifying Java enterprise systems and need a structured, repeatable ISO/IEC 25010:2023 quality-attribute review covering Functional Suitability, Performance Efficiency, Compatibility, Interaction Capability, Reliability, Security, Maintainability, Flexibility, and S…
aiskillstore / vibe-securitySecurity intelligence for code analysis. Detects SQL injection, XSS, CSRF, authentication issues, crypto failures, and more. Actions: scan, analyze, fix, audit, check, review, secure, validate, sanitize, protect. Languages: JavaScript, TypeScript, Python, PHP, Java, Go, Ruby.
aiskillstore / security-patternsSecurity patterns and OWASP guidelines. Triggers on: security review, OWASP, XSS, SQL injection, CSRF, authentication, authorization, secrets management, input validation, secure coding.
aiskillstore / code-reviewUse this skill when user asks to "review code", "check for issues", "analyze code quality", "find bugs", or wants feedback on code implementation.
sanjay3290 / azure-devopsManage Azure DevOps projects, work items, repos, PRs, pipelines, wikis, test plans, security alerts, variable groups, environments/approvals, branch policies, and attachments
tobihagemann / review-codeReview code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps and low-value tests by running internal reviews and a peer review in parallel and returning combined findings.
tobihagemann / create-threat-modelAnalyze a codebase and produce a structured threat model at .turbo/threat-model.md covering assets, trust boundaries, attack surfaces with existing mitigations, attacker stories, and calibrated severity
jamditis / supply-chain-hardeningInstall-time cooldowns for npm/bun plus a sandboxed pre-install scan for bypasses. Use for supply-chain attacks or npm security.
prekuter / migrationBring an existing codebase into Dryforge, once. Reads the code, asks what code cannot show — business rules, security policy, what is intentional — and writes the project docs at the entry points agents already read
jamditis / api-hardeningAPI hardening for Express, FastAPI, and serverless. Use for rate limiting, CORS, input validation, API keys, or OWASP API Top 10.
jamditis / secure-authSecure authentication patterns (OWASP, NIST). Use for login, registration, password reset, sessions, JWT, OAuth, MFA, passkeys.
