Security & Testing Agent Skills for HTTP / API

Bug bounty program management and security disclosure expertise for smart contracts.

Proactively hunt the codebase for bugs of every size — major reliability bugs (connection/network failures, missing timeouts, unhandled…

Full bug hunt cycle — dispatch 4 sibling bug-hunter methodology skills in parallel, cross-validate findings, present design decisions, and…

Executes intelligent, incremental build checks and test verifications based on changed files and caching.

Audits, optimizes, and updates build and test verification configurations to ensure robust project validation.

Build a ComplianceAsCode product

Builds an automated malware submission and analysis pipeline that collects

Deploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS…

Builds vendor-agnostic detection rules using the Sigma rule format for

Configure SAML 2.0 identity federation between on-premises Active Directory (via AD FS or a third-party IdP) and Microsoft Entra ID…

Designs and documents structured incident response playbooks with step-by-step

Build collaborative forensic incident timelines using Timesketch to ingest,

Build an automated pipeline that ingests raw IOCs (URLs, IPs, domains,

Build structured communication templates for malware incidents (ransomware,

Implement a phishing report button (Microsoft 365 built-in Report button

Deploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB

Apply bottom-up and top-down role mining techniques, including clustering

Build threat actor profiles by collecting OSINT from vendor reports, paste sites, dark web forums, social media, and code repos…

Build automated IOC enrichment pipelines in Splunk Enterprise Security by ingesting threat feeds into KV Store collections and correlating…

Builds automated threat intelligence feed integration pipelines connecting

Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and…