Security & Testing Agent Skills for Windsurf (legacy)

Builds SOC performance metrics and KPI tracking dashboards measuring

Builds a structured SOC incident response playbook for ransomware attacks

Build comprehensive threat actor profiles using open-source intelligence

Build automated threat intelligence enrichment pipelines in Splunk Enterprise

Builds automated threat intelligence feed integration pipelines connecting

Building a Threat Intelligence Platform (TIP) involves deploying and

Implement a vulnerability aging dashboard and SLA tracking system to

Deploy DefectDojo as a centralized vulnerability management dashboard

Builds a structured vulnerability scanning workflow using tools like

Discovering and accessing unprotected pages, APIs, and administrative

Systematically collects, categorizes, and distributes indicators of

Collects and synthesizes open-source intelligence (OSINT) about threat

MISP (Malware Information Sharing Platform) is an open-source threat

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,

This skill outlines methodologies for performing authorized penetration

Execute an internal network penetration test simulating an insider threat

Conduct internal Active Directory reconnaissance using BloodHound Community

Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection

Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap

Performs memory forensics analysis using Volatility 3 to extract evidence

Conducts penetration testing of iOS and Android mobile applications