Security & Testing Agent Skills for HTTP / API

Fetch and parse the CISA Known Exploited Vulnerabilities (KEV) catalog,

Deploys deception technology including honeypots, honeytokens, and decoy

Runs Docker Bench for Security, the open-source CIS Docker Benchmark audit script, across host configuration, daemon settings, images, and…

Performs vulnerability remediation on endpoints by prioritizing CVEs

Recovers files from disk images and unallocated space using Foremost's

Performs coverage-guided fuzzing of compiled binaries with AFL++, instrumenting

Performs authorized GCP security testing using GCPBucketBrute to enumerate

Performing comprehensive security assessments of Google Cloud Platform

Integrates Hardware Security Modules (HSMs) via the PKCS#11 interface

Investigates insider threat incidents involving employees, contractors,

Performs comprehensive security assessments of IoT devices and their

Analyze IP address reputation using the Shodan API to identify open ports,

Evaluates Kubernetes cluster security by actively simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC…

Perform structured log source onboarding into SIEM platforms (Splunk,

Performs rapid malware triage and classification using YARA rules that

Analyze memory dumps using Volatility3 plugins to detect injected code,

Acquire and analyze mobile device data using Cellebrite UFED Touch/4PC, UFED Physical Analyzer, and open-source alternatives (ALEAPP…

Automate network traffic analysis using tshark (Wireshark CLI) and pyshark to compute protocol distribution statistics, detect suspicious…

Deploy Zeek (formerly Bro) as a passive network security monitor to generate structured logs of protocol metadata (HTTP, DNS, TLS, SSH…

Conduct cybersecurity assessments of upstream, midstream, and downstream oil and gas operations, covering pipeline SCADA, refinery DCS…

Perform OT vulnerability assessments using the Claroty xDome platform for asset discovery, risk scoring, and vulnerability correlation…