Security & Testing Agent Skills for Cursor

Configure NextDNS as an encrypted (DoH/DoT) zero trust DNS resolver that blocks malicious, phishing, and cryptojacking domains via…

Secures SaaS apps (Microsoft 365, Google Workspace, Salesforce, Slack) via CASB/SSPM deployment, conditional access policies, OAuth app…

Configures Zero Trust Network Access (ZTNA) in AWS, Azure, and GCP using identity-aware proxies, micro-segmentation, and continuous…

Configures Zero Trust Network Access using Zscaler Private Access (ZPA) to broker identity-based, context-aware connections between…

Configures Google BeyondCorp Enterprise Identity-Aware Proxy (IAP) as the access enforcement point for web applications, defining Access…

Installs and configures HashiCorp Boundary as a default-deny, identity-aware proxy for infrastructure access, including controller/worker…

Create and maintain GitHub Agentic Workflows (gh-aw) for Prowler.

When to activate: breach notification, data breach, incident response, GDPR 72 hours, CCPA notification, HIPAA breach, regulator…

Guide for connecting Infisical to an identity provider for human login and user provisioning.

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production.

Integrates CodeQL and Semgrep SAST scanning into GitHub Actions, covering scans on pull requests/pushes, rule tuning to cut false…

This skill enables Claude to seamlessly integrate with various secrets managers like HashiCorp Vault and AWS Secrets Manager.

Investigates insider threat indicators including data exfiltration attempts,

Forensically preserve memory and disk, collect ransom notes and encrypted file samples, and identify the ransomware variant using tools…

Automate Ip2proxy tasks via Rube MCP (Composio).

Automate Ip2whois tasks via Rube MCP (Composio).

Functional safety process and analysis support per ISO 26262

ISO 42001 AI Management System (AIMS) compliance.