Security & Testing Agent Skills for Gemini CLI

Perform Kerberoasting, a post-exploitation technique that enumerates

Assesses the security posture of the etcd cluster backing Kubernetes: encryption at rest, TLS peer and client transport, access control…

Detects lateral movement techniques including Pass-the-Hash, PsExec,

Perform lateral movement across Windows networks using WMI-based remote

Perform forensic investigation of Linux system logs including syslog,

Collect, parse, and correlate system, application, and security logs

Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal

Malware IOC extraction is the process of analyzing malicious software

Systematically investigate all persistence mechanisms on Windows and

Analyze volatile memory (RAM) dumps using the Volatility 3 framework

Bypasses SSL/TLS certificate pinning implementations in Android and

Capture and analyze network traffic using Wireshark and tshark to reconstruct network events from PCAP/PCAPNG files, extract transferred…

Perform forensic analysis of network packet captures (PCAP/PCAPNG) using Wireshark, tshark, and tcpdump to reconstruct network…

Conduct a NIST Cybersecurity Framework (CSF) 2.0 maturity assessment across the six core Functions (Govern, Identify, Protect, Detect…

Performs OAuth 2.0 scope minimization review to identify over-permissioned

Open Source Intelligence (OSINT) gathering is the first active phase

Automate OSINT collection with the SpiderFoot REST API and CLI (sf.py/spiderfoot-cli) across 200+ modules, selecting scan modes…

This skill covers conducting comprehensive security assessments of Operational

Perform vulnerability scanning in OT/ICS environments safely using passive

Crafts and injects custom network packets using Scapy, hping3, and Nemesis

Monitor paste sites like Pastebin and GitHub Gists for leaked credentials,