Security & Testing Agent Skills

Detects suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event log Event ID 7045, analyzing service…

Runs a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing servers by analyzing file creation in web…

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing.

Audit the union of every IAM policy attached to one principal for privilege-escalation paths that no single statement reveals, and for…

Automates binary reverse engineering, decompilation, and vulnerability analysis using IDA Pro and MCP tool integration.

Accelerates binary analysis and security research by integrating IDA Pro’s powerful decompilation and static analysis tools with AI.

IDA Pro Python scripting for reverse engineering.

Use when building an identity service or handling the account lifecycle.

This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken…

Implements API Security Posture Management (API-SPM) to continuously

Implements API security testing on the 42Crunch platform, combining

Implements API threat protection using Google Apigee reverse-proxy

Implements application whitelisting using Windows AppLocker to restrict

Implement RPKI-based BGP route origin validation by creating Route Origin

Deploys remote browser isolation (RBI) as a core component of a Zero

Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure

Assess, gap-analyze, and progressively implement the CISA Zero Trust

Implements cloud workload protection using boto3 and google-cloud APIs

Reduces container attack surface by building application images on Google distroless base images that ship only the application runtime…

Deploys Breach and Attack Simulation (BAS) platforms such as SafeBreach,

Implements device posture assessment as a zero trust access control