Security & Testing Agent Skills for Windsurf (legacy)

Plant canarytokens and honey credentials and alert on breach.

Design Failure Mode and Effects Analysis (DFMEA) skill for systematic design risk identification

Design and create a simulation persona for testing an AI agent.

Designs and implements testing strategies for any codebase.

Detect LSASS credential dumping, SAM database extraction, and NTDS.dit theft (e.g. via Mimikatz) using Sysmon Event ID 10 process-access…

Probe a target for accidentally-public admin / debug / introspection endpoints — Spring Boot Actuator, Apache server-status, Prometheus…

Detect AI-generated deepfake audio used in voice phishing (vishing) by extracting spectral features (MFCC, spectral centroid, spectral…

Detect DLL side-loading and search-order hijacking (MITRE T1574) where adversaries plant malicious DLLs for legitimate signed applications…

Detect anomalies in DNP3 communications used in SCADA/ICS systems by monitoring unauthorized control commands, firmware update attempts…

Detect compromised O365 and Google Workspace email accounts by analyzing Unified Audit Logs and Azure AD sign-in logs for impossible…

Detect malicious inbox/mail-flow forwarding rules that adversaries create to maintain

Detects fileless malware and in-memory attacks that execute entirely

Detects and analyzes fileless malware that operates entirely in memory

Detect Golden Ticket attacks in Active Directory using Splunk and KQL queries

Detect insider threat behavioral indicators including unusual data access,

Identifies lateral movement techniques in enterprise networks by analyzing

Detect adversary lateral movement across networks using Splunk SPL queries

Detect lateral movement in network traffic using Zeek (formerly Bro)

Detect Mimikatz credential-dumping activity via command-line pattern matching, LSASS access signatures, binary/hash indicators, and…

Deploy and configure Zeek (formerly Bro) to passively analyze network traffic, generate structured connection/DNS/HTTP/SSL/file logs…

Detect network reconnaissance and port scanning using Suricata and Snort