Security & Testing Agent Skills for Gemini CLI

Check HIPAA compliance for healthcare data security requirements.

HIPAA compliance validation skill for genomic data handling and audit

LLM & VLM evaluation suite for home security AI applications

Apply Hootsuite security best practices for secrets and access control.

Implement HubSpot lint rules, secret scanning, and CI policy checks.

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE).

Proactively hunts for Advanced Persistent Threat (APT) activity within

Detect Cobalt Strike beacon command-and-control traffic using default TLS certificate signatures (serial 8BB00EE), JA3/JA3S/JARM…

Hunt for data exfiltration by analyzing Zeek and Suricata network telemetry for unusual data flows, DNS tunneling via large/frequent TXT…

Hunt for DCOM-based lateral movement (MITRE ATT&CK T1021.003) by detecting

Detects DNS tunneling and covert-channel data exfiltration by analyzing

Hunts for adversary abuse of legitimate cloud services (Azure, AWS, GCP,

Proactively hunts for adversary abuse of legitimate, signed system binaries

Hunts for registry-based persistence mechanisms (MITRE T1547) in Windows

Runs a hypothesis-driven threat hunt for Windows Scheduled Task persistence (T1053), guiding SIEM/EDR queries against task creation events…

Runs a hypothesis-driven threat hunt for supply-chain compromise (T1195) by querying SIEM/EDR logs for trojanized software updates…

Hunts for adversary persistence and execution via Windows scheduled tasks (T1053.005) by analyzing Security Event ID 4698 task-creation…

Hunts for MITRE ATT&CK T1098 account manipulation - shadow admin creation, SID history injection, group membership changes, and credential…

Detects suspicious Windows service installations (MITRE ATT&CK T1543.003) by parsing System event log Event ID 7045, analyzing service…

Runs a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing servers by analyzing file creation in web…

Drive and visually inspect a native GUI app (Iced, egui, GTK, winit…) on Hyprland through a headless output, leaving the user's desktop…