Security & Testing Agent Skills for Gemini CLI

Configure and execute agentless vulnerability scanning using network

Perform systematic alert triage in Elastic Security SIEM—classifying,

Uses Microsoft RESTler to perform stateful REST API fuzzing: compiles

Performs API inventory and discovery to identify all API endpoints in

Tests API rate limiting for bypass vulnerabilities using Python (requests/aiohttp)

Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS/Greenbone

Run the agentless, open-source ScoutSuite tool (via pip install and the `scout` CLI)

Simulate bandwidth throttling and network degradation attacks using tc,

Analyze ELF binaries for memory-corruption vulnerabilities and build proof-of-concept

Detect and exploit blind Server-Side Request Forgery (SSRF) using out-of-band

Monitor for brand impersonation attacks across domains, social media,

Testing web applications for clickjacking vulnerabilities by assessing

Collect and analyze cloud forensic evidence using AWS CLI, Azure CLI, or gcloud

Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents

Execute cloud-native incident containment across AWS, Azure, and GCP using platform

Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs,

Perform forensic acquisition of cloud storage services including Google

Audits container and pod configuration for escape-enabling misconfiguration using the Kubernetes Python client - privileged flags…

Harden container images by minimizing attack surface, stripping unnecessary

Extract stored credentials from compromised endpoints using the LaZagne

Testing web applications for Cross-Site Request Forgery vulnerabilities