Agent skills

Performs API inventory and discovery to identify all API endpoints in

Uses Postman to build structured API security test collections covering

Build a multi-factor asset criticality scoring model—incorporating data

Configure and execute authenticated (credentialed) vulnerability scans using OpenVAS/Greenbone

Plan and run authenticated (credentialed) vulnerability scans with scanners such as

Monitor for brand impersonation attacks across domains, social media,

Investigate AWS account compromise by querying CloudTrail with boto3's LookupEvents

Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs,

Run authorized AWS penetration tests with Pacu, the open-source AWS exploitation

Analyze Content-Security-Policy headers and bypass them to achieve cross-site

Testing web applications for Cross-Site Request Forgery vulnerabilities

Test web applications for path traversal and Local/Remote File Inclusion

Runs Docker Bench for Security, the open-source CIS Docker Benchmark audit script, across host configuration, daemon settings, images, and…

Performs digital forensics investigation on compromised endpoints including

Runs entitlement review and access certification campaigns in SailPoint

Conduct a comprehensive external network penetration test to identify

Performs firmware image extraction and analysis using binwalk to identify

Performs coverage-guided fuzzing of compiled binaries with AFL++, instrumenting

Cracks password hashes with Hashcat, covering hash-type identification,

Assesses the security posture of the etcd cluster backing Kubernetes: encryption at rest, TLS peer and client transport, access control…

Detects lateral movement techniques including Pass-the-Hash, PsExec,