Security & Testing Agent Skills for Windsurf (legacy)

Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize

Implements Mobile Application Management (MAM) policies to protect enterprise

Deploys and configures Suricata as an inline network intrusion prevention system,

Designs and implements network segmentation using firewall security zones, VLANs,

Queries Arkime (formerly Moloch) full packet capture via its API to search sessions,

Deploys OPA Gatekeeper via Helm as a Kubernetes admission controller and writes ConstraintTemplates with Rego plus instantiated…

Deploy privileged access management for database systems including Oracle,

Deploy FIDO2/WebAuthn passwordless authentication using security keys

Implements a structured patch management program for OT/ICS environments

Patch management is the systematic process of identifying, testing, deploying,

Deploy CyberArk Privileged Access Management to discover, vault, rotate,

Hardens Kubernetes RBAC by designing least-privilege Roles and ClusterRoles, auditing RoleBindings, eliminating cluster-admin sprawl…

Generates, stores, rotates, and manages RSA key pairs following NIST

Implement SAML 2.0 Single Sign-On using Okta as the Identity Provider,

Implement automated user lifecycle provisioning and deprovisioning using

Deploy HashiCorp Vault for centralized secrets management, covering dynamic

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked

Automates phishing incident response by calling the Splunk SOAR (Phantom)

Deploy and configure a TAXII 2.1 server (Medallion) with Docker, publish

Build out a full CTI program around the six-phase threat intelligence

Implements an integrated incident ticketing system connecting SIEM alerts