Security & Testing Agent Skills

Reduces container attack surface by building application images on Google distroless base images that ship only the application runtime…

Deploys Breach and Attack Simulation (BAS) platforms such as SafeBreach,

Implements device posture assessment as a zero trust access control

The Diamond Model of Intrusion Analysis provides a structured framework

Implements digital signatures using the Ed25519 algorithm (Curve25519), covering key-pair generation, signing, signature verification, and…

Configures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce a…

Implements eBPF-based security monitoring using Cilium Tetragon for

Email sandboxing detonates suspicious attachments and URLs in isolated

Implements a simplified Signal Protocol-style end-to-end encryption scheme for messaging, covering key exchange, forward secrecy, and the…

Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML…

Implements GCP Binary Authorization end to end, including creating KMS-backed attestors, Container Analysis notes, deploy-time policies…

Configures GitHub Advanced Security (code scanning with CodeQL, secret scanning, dependency review, and Dependabot alerts) to perform…

Hardens a Google Workspace tenant via Admin Console configuration:

Configures Google Workspace advanced phishing and malware protection settings in the Admin Console — pre-delivery message scanning…

Builds a FIDO2/WebAuthn relying party server with the python-fido2

Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries,

Deploys SailPoint IdentityNow or IdentityIQ for identity governance and

Implements ransomware-resistant backups using restic with S3-compatible

Guides implementation of an ISO/IEC 27001:2022 Information Security Management System (ISMS) end to end: gap analysis and scoping, risk…

Implements Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access, covering…

Installs Calico as the cluster CNI and writes standard Kubernetes NetworkPolicy under it, covering default-deny baselines, policy ordering…