Hardens AWS IAM configurations to enforce least-privilege access, covering
Hardens AWS Lambda execution roles by writing least-privilege IAM policies,
Configures the security features of the Harbor open-source container registry - integrated Trivy scanning, Cosign and Notary content trust…
Hardens GitHub Actions workflows against supply chain attacks, credential
Secures Helm chart deployments by verifying chart signatures and provenance, rendering and linting templates for misconfiguration…
Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD,
Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing
Designs and configures secure remote access to OT/ICS environments for
Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google
Optimizes Chinese social science and finance manuscripts for submission to the Securities Market Herald journal.
Secure coding practices for agent-native apps: input validation, SQL injection, XSS, secrets, data scoping, and auth.
Master skill for comprehensive security analysis.
Comprehensive security scanning and vulnerability detection.
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and…
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
Use when the user takes over an inherited system, codebase, server, or cloud account from a prior developer — or when leaked secrets, open…
Perform language and framework specific security best-practice reviews and suggest improvements.
Build a minimal but real security policy for sensitive apps.
Hunt for exploitable, bounty-worthy security issues in repositories.
Comprehensive AI-powered security scanning suite with 48 skills covering OWASP Top 10, 7 language-specific deep scanners (Go, TypeScript…
Adversarial defense layer for the mortgage plugin — protects against prompt injection, system prompt extraction, PII leakage, workflow…