Run an evidence-backed, stack-agnostic security and abuse-resistance review before an application launch.
Use when building apps that collect user data.
Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review.
Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux…
Process Failure Mode and Effects Analysis (PFMEA) skill for manufacturing risk assessment
Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to…
End-to-end production QA, build verification, and launch-readiness checklist for fullstack Next.js apps.
Prompt injection detection and prevention for secure LLM applications
Write, run, and improve non-redteam Promptfoo eval suites for a configured target: test cases, assertions, rubrics, datasets, and CI gates.
QA and testing engineer — test strategy, E2E suites, API tests, flaky test triage, coverage.
Creates Prowler Attack Paths openCypher queries using the Cartography schema as the source of truth for node labels, properties, and…
Playwright E2E testing patterns. Trigger: When writing Playwright E2E tests (Page Object Model, selectors, MCP exploration workflow). For…
Creates MCP tools for Prowler MCP Server.
Creates new Prowler cloud providers or adds services to existing providers.
Updates the "Prowler at a Glance" table in README.md with accurate provider statistics.
Pre-Startup Safety Review checklist generation skill for startup readiness verification
HIPAA-specific entrypoint for healthcare privacy and security work.
ML-specific testing skill using pytest with fixtures for data, models, and predictions.
Expert pytest framework for Python unit, integration, and functional testing
Run and test Python code in a dedicated playground directory.
Use pytest as the testing framework for its powerful features and clean syntax. pytest automatically discovers tests following these…