Security & Testing Agent Skills for Grok Build

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect

Analyze a target's TLS configuration — negotiated protocol version, cipher suite, certificate chain, expiry, and downgrade vectors.

Generate domain permutations with dnstwist and check DNS resolution

Correlate Windows registry keys (USBSTOR, MountedDevices), Event Logs,

Parse Apache and Nginx access logs to detect SQL injection attempts,

Parses the Windows Amcache.hve registry hive with Eric Zimmerman''s

Analyzes Windows Security, System, and Sysmon event logs in Splunk to

Parse Windows Prefetch (.pf) files with the windowsprefetch Python

Analyze Windows Shellbag (BagMRU) registry artifacts with SBECmd and

Secure Anima and Figma tokens for design-to-code pipelines.

Implement data privacy, PII handling, and compliance patterns for Claude

Configure Anthropic enterprise organization management, Workspaces,

Implement content safety guardrails for Claude \u2014 input filtering,\n\

Apply Anthropic Claude API security best practices for key management,

Structured debugging session — reproduce, isolate, diagnose, and fix.

Use BEFORE responding when the user's request shows pressure to validate or agree ("tell them what they want", "make them happy"…

Find and prove Broken Function Level Authorization (BFLA / API5:2023) in an API during an authorized test — reaching administrative or…

Find and prove Broken Object Level Authorization (BOLA / API1:2023) in a REST or GraphQL API during an authorized assessment.

Configure perform API fuzzing to discover edge cases, crashes, and security

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

Detect and close Improper Inventory Management (API9:2023) for a REST or GraphQL API.