Security & Testing Agent Skills

Systematically map threat actor behavior and observed IOCs to the MITRE ATT&CK framework, build technique coverage heatmaps with the…

Query a MISP (Malware Information Sharing Platform) instance via PyMISP

Analyzes UEFI bootkit persistence (SPI flash implants, ESP modifications,

Parse Windows LNK shortcut files to extract target paths, MAC timestamps,

Vitest fast unit testing framework powered by Vite with Jest-compatible API.

Cross-cutting review of recent work — catches gaps between specialists.

Detect Broken Authentication abuse (API2:2023) against an API from auth-endpoint telemetry and token-validation events — invalid-signature…

Detect Broken Object Level Authorization (BOLA / API1:2023) abuse against a REST or GraphQL API from access logs, gateway telemetry, and…

Harden sensitive business flows against Unrestricted Access (API6:2023) and detect automated abuse.

Detect excessive data exposure (API3:2023) in an API from response telemetry and schema-diff analysis — endpoints returning sensitive…

Detect Broken Function Level Authorization abuse (BFLA / API5:2023) against an API from access logs and role/route telemetry…

API key generation, rotation, and management system

Find and prove mass assignment / Broken Object Property Level Authorization (API3:2023) in an API during an authorized test — setting…

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against…

Harden a REST or GraphQL API against Security Misconfiguration (API8:2023).

Threat-model, design, implement, and review secure APIs and API-facing workflows.

Harden a REST or GraphQL API against Server-Side Request Forgery (SSRF / API7:2023) and detect exploitation attempts.

Build API test suites — endpoint testing, contract testing, load testing for REST/GraphQL/gRPC APIs.

Harden an application against Unsafe Consumption of APIs (API10:2023).

Secure Apify API tokens, configure proxy access, and protect Actor data.

Enterprise role-based access control for Apollo.io.