Security & Testing Agent Skills for Claude Code

Detect unusual API call patterns in AWS CloudTrail logs using boto3,

Automate AWS GuardDuty threat detection findings processing using EventBridge

Detects and analyzes Bluetooth Low Energy (BLE) security attacks including

Deploy AI and NLP-powered detection systems to identify business email

Container escape is a critical attack technique where an adversary breaks

Detect compromised O365 and Google Workspace email accounts by analyzing

Detect Golden Ticket attacks in Active Directory by analyzing Kerberos

Implement User and Entity Behavior Analytics using Elasticsearch/OpenSearch

Identifies lateral movement techniques in enterprise networks by analyzing

This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications

Detect Pass-the-Hash attacks by analyzing NTLM authentication patterns,

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event

Detects and analyzes process injection techniques used by malware including

Detects and prevents code injection attacks targeting serverless functions

Discover and inventory shadow API endpoints that operate outside documented

This skill covers detecting sophisticated cyber-physical attacks that

Systematically remove malware, backdoors, and attacker persistence mechanisms

Evaluates and selects Threat Intelligence Platform (TIP) products based

Executes comprehensive red team exercises that simulate real-world adversary

Analyzes and simulates BGP hijacking scenarios in authorized lab environments

Discover and exploit broken link hijacking vulnerabilities by identifying