Security & Testing Agent Skills

Testing web applications for clickjacking vulnerabilities by assessing

Collect and analyze cloud forensic evidence using AWS CLI, Azure CLI, or gcloud

Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents

Execute cloud-native incident containment across AWS, Azure, and GCP using platform

Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs,

Perform forensic acquisition of cloud storage services including Google

Audits container and pod configuration for escape-enabling misconfiguration using the Kubernetes Python client - privileged flags…

Harden container images by minimizing attack surface, stripping unnecessary

Extract stored credentials from compromised endpoints using the LaZagne

Testing web applications for Cross-Site Request Forgery vulnerabilities

Dark web monitoring involves systematically scanning Tor hidden services,

Conduct disk forensics investigations using forensic imaging, file system

Enumerates DNS records, attempts zone transfers, brute-forces subdomains,

Detects DNS tunneling by computing Shannon entropy of DNS query names,

Performs runtime dynamic analysis of Android applications using Frida,

Perform interactive dynamic malware analysis using the ANY.RUN cloud sandbox

Performs digital forensics investigation on compromised endpoints including

Runs entitlement review and access certification campaigns in SailPoint

Conduct a comprehensive external network penetration test to identify

Reduces SIEM false positives through systematic rule tuning, threshold

Performs firmware image extraction and analysis using binwalk to identify