Security & Testing Agent Skills for Claude Code

Deploys Breach and Attack Simulation (BAS) platforms such as SafeBreach,

Implements device posture assessment as a zero trust access control

The Diamond Model of Intrusion Analysis provides a structured framework

Implements digital signatures using the Ed25519 algorithm (Curve25519), covering key-pair generation, signing, signature verification, and…

Configures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce a…

Implements eBPF-based security monitoring using Cilium Tetragon for

Email sandboxing detonates suspicious attachments and URLs in isolated

Implements a simplified Signal Protocol-style end-to-end encryption scheme for messaging, covering key exchange, forward secrecy, and the…

Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML…

Implements GCP Binary Authorization end to end, including creating KMS-backed attestors, Container Analysis notes, deploy-time policies…

Configures GitHub Advanced Security (code scanning with CodeQL, secret scanning, dependency review, and Dependabot alerts) to perform…

Hardens a Google Workspace tenant via Admin Console configuration:

Configures Google Workspace advanced phishing and malware protection settings in the Admin Console — pre-delivery message scanning…

Builds a FIDO2/WebAuthn relying party server with the python-fido2

Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries,

Deploys SailPoint IdentityNow or IdentityIQ for identity governance and

Implements ransomware-resistant backups using restic with S3-compatible

Guides implementation of an ISO/IEC 27001:2022 Information Security Management System (ISMS) end to end: gap analysis and scoping, risk…

Implements Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access, covering…

Installs Calico as the cluster CNI and writes standard Kubernetes NetworkPolicy under it, covering default-deny baselines, policy ordering…

Implements input/output validation guardrails for LLM applications using