Security & Testing Agent Skills

Deploy and operate the CAPEv2 malware sandbox (a Cuckoo derivative) to run samples in a

Performing authorized privilege escalation assessments in AWS environments

Assess Bluetooth Low Energy (BLE) device security using Python's bleak asyncio

Run Cartography to sync AWS, GCP, or Azure resources into a Neo4j graph database,

Uses Falco YAML rules for runtime threat detection in containers and

Run authorized AWS penetration tests with Pacu, the open-source AWS exploitation

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and…

Analyze Content-Security-Policy headers and bypass them to achieve cross-site

A cryptographic audit systematically reviews an application's use of

Fetch and parse the CISA Known Exploited Vulnerabilities (KEV) catalog,

Deploys deception technology including honeypots, honeytokens, and decoy

Runs Docker Bench for Security, the open-source CIS Docker Benchmark audit script, across host configuration, daemon settings, images, and…

Performs vulnerability remediation on endpoints by prioritizing CVEs

Recovers files from disk images and unallocated space using Foremost's

Performs coverage-guided fuzzing of compiled binaries with AFL++, instrumenting

Performs authorized GCP security testing using GCPBucketBrute to enumerate

Performing comprehensive security assessments of Google Cloud Platform

Integrates Hardware Security Modules (HSMs) via the PKCS#11 interface

Investigates insider threat incidents involving employees, contractors,

Performs comprehensive security assessments of IoT devices and their

Analyze IP address reputation using the Shodan API to identify open ports,