Security & Testing Agent Skills

Implements an integrated incident ticketing system connecting SIEM alerts

Deploy and configure Velociraptor for scalable endpoint forensic artifact

Design a vulnerability remediation SLA program covering asset tiering,

Build an automated SLA breach alerting system for vulnerability remediation,

Implements the Schnorr identification protocol and a simplified Zero-Knowledge Password Proof (ZKPP) over the discrete logarithm problem…

Deploy CyberArk Secure Cloud Access (SCA) to eliminate standing privileges in AWS, Azure, and GCP by provisioning ephemeral, scoped roles…

Configure NextDNS as an encrypted (DoH/DoT) zero trust DNS resolver that blocks malicious, phishing, and cryptojacking domains via…

Secures SaaS apps (Microsoft 365, Google Workspace, Salesforce, Slack) via CASB/SSPM deployment, conditional access policies, OAuth app…

Configures Zero Trust Network Access (ZTNA) in AWS, Azure, and GCP using identity-aware proxies, micro-segmentation, and continuous…

Configures Zero Trust Network Access using Zscaler Private Access (ZPA) to broker identity-based, context-aware connections between…

Configures Google BeyondCorp Enterprise Identity-Aware Proxy (IAP) as the access enforcement point for web applications, defining Access…

Installs and configures HashiCorp Boundary as a default-deny, identity-aware proxy for infrastructure access, including controller/worker…

Improve test setup, instrumentation, calibration, sequencing, timing, multisite behavior, state restoration, or teardown without silently…

Create and maintain GitHub Agentic Workflows (gh-aw) for Prowler.

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies.

Drafts a board-approvable Information Security Policy covering data classification, access controls, encryption, incident response, breach…

Use when writing a constructor or initialiser, when a type needs a collaborator to do its work, or when adding a parameter so something…

Hunt ASP.NET-specific surface — ViewState deserialization (signed-only vs encrypted), machineKey recovery, dual-parser MAC-bypass…

Hardware-free testing of instrument-control code — mock architecture (ordered call_log, scripted responses, state simulation, failure…

Integrates CodeQL and Semgrep SAST scanning into GitHub Actions, covering scans on pull requests/pushes, rule tuning to cut false…