Security & Testing Agent Skills for DeepSeek Harness

Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML…

Implements GCP Binary Authorization end to end, including creating KMS-backed attestors, Container Analysis notes, deploy-time policies…

Configures GitHub Advanced Security (code scanning with CodeQL, secret scanning, dependency review, and Dependabot alerts) to perform…

Hardens a Google Workspace tenant via Admin Console configuration:

Configures Google Workspace advanced phishing and malware protection settings in the Admin Console — pre-delivery message scanning…

Builds a FIDO2/WebAuthn relying party server with the python-fido2

Deploys canary tokens and honeytokens (fake AWS credentials, DNS canaries,

Deploys SailPoint IdentityNow or IdentityIQ for identity governance and

Implements ransomware-resistant backups using restic with S3-compatible

Guides implementation of an ISO/IEC 27001:2022 Information Security Management System (ISMS) end to end: gap analysis and scoping, risk…

Implements Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access, covering…

Installs Calico as the cluster CNI and writes standard Kubernetes NetworkPolicy under it, covering default-deny baselines, policy ordering…

Implements input/output validation guardrails for LLM applications using

Builds an append-only log integrity chain using SHA-256 hash chaining, where each entry incorporates the previous entry's hash so…

Implements memory protection mechanisms including DEP (Data Execution

Implements microsegmentation with Akamai Guardicore Segmentation to map

Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize

Implements Mobile Application Management (MAM) policies to protect enterprise

Deploys and configures Suricata as an inline network intrusion prevention system,

Designs and implements network segmentation using firewall security zones, VLANs,

Queries Arkime (formerly Moloch) full packet capture via its API to search sessions,