Security & Testing Agent Skills for Claude Code

Configures Windows Event Logging with advanced audit policies to generate

Configuring Zscaler Private Access (ZPA) to replace traditional VPN

Executes containment strategies to stop active adversary operations

Correlates security events in IBM QRadar SIEM using AQL (Ariel Query

Correlates disparate security incidents, IOCs, and adversary behaviors

Deobfuscates malicious JavaScript code used in web-based attacks, phishing

Systematically deobfuscate multi-layer PowerShell malware using AST analysis,

Deploys deception-based honeytokens in Active Directory including fake

Deploying Cloudflare Access with Cloudflare Tunnel to provide zero trust

Deploys and configures CrowdStrike Falcon EDR agents across enterprise

Deploys and configures osquery for real-time endpoint monitoring using

Deploying Palo Alto Networks Prisma Access for SASE-based zero trust

Deploys and monitors ransomware canary files across critical directories

Deploy and configure Tailscale as a WireGuard-based zero trust mesh VPN

Detects prompt injection attacks targeting LLM-based applications using

This skill covers deploying anomaly detection systems for industrial

Detects anomalous authentication patterns using UEBA analytics, statistical

Detect and prevent API enumeration attacks including BOLA and IDOR exploitation

Detect and prevent ARP spoofing attacks using ARPWatch, Dynamic ARP Inspection,

Detect cyber attacks targeting OT historian servers (OSIsoft PI, Ignition,

This skill covers detecting cyber attacks targeting Supervisory Control