Agent skills by cyberful, page 2

Operate Prowler, Cloudsplaining, cloud CLIs, policy documents, and resource evidence for advanced AWS, Azure, GCP, and Kubernetes-adjacent posture assessment.

cyberful/cyberful

Operate Cyberful's pinned Foundry toolchain and engagement-owned Anvil lab for authorized EVM smart-contract bug bounty work.

cyberful/cyberful

Operate kubectl, kube-bench, Trivy, Prowler, and manifest/runtime evidence for advanced Kubernetes security assessment.

cyberful/cyberful

Operate AFL++, libFuzzer with Clang sanitizers, and Jazzer for advanced coverage-guided native and JVM fuzzing.

cyberful/cyberful

Use sqlmap to confirm and characterize suspected SQL injection with faithful requests and bounded evidence.

cyberful/cyberful

Coordinate testing of authentication and authenticator state across registration, login, MFA, recovery, linking, federation, device trust, reauthentication, suspension, and revocation.

cyberful/cyberful

Coordinate testing of product invariants and multi-step workflows across money, entitlements, approvals, quotas, inventory, onboarding, and distributed state.

cyberful/cyberful

Assess sensitive-data lifecycle, secret handling, cryptographic design and implementation, key management, password storage, randomness, signing, encryption, transport protection, and side channels…

cyberful/cyberful

Assess externally or internally reachable services, administrative planes, debug interfaces, data stores, search clusters, object storage, orphaned DNS, and deployment exposure during authorized…

cyberful/cyberful

Assess server-side URL retrieval and network egress during authorized penetration tests or code audits.

cyberful/cyberful

Test and audit authenticated session state across cookies, opaque tokens, bearer tokens, refresh tokens, devices, browsers, APIs, and privilege transitions.

cyberful/cyberful

Reconstruct request and event causality across gateways, services, queues, workers, data stores, and external providers while preserving identity, tenant, authorization, retry, and side-effect…

cyberful/cyberful

Trace and test untrusted data through SQL, NoSQL, LDAP, XPath, XML, shell, process, template, expression-language, code-evaluation, log, spreadsheet, mail, header, and browser interpreters.

cyberful/cyberful

Transform bounded HAR captures into deterministic HTTP evidence about methods, origins, paths, status classes, header presence, redirects, cookies, and body sizes without replaying traffic or…

cyberful/cyberful

Normalize and correlate bounded SARIF and Cyberful finding exports offline by rule, location, fingerprint, source, level, suppression, and evidence reference without treating scanner severity as…

cyberful/cyberful

Assess AI-system risk from architecture, intended use, affected actors, model limitations, data lineage, autonomy, human oversight, monitoring, and failure consequences.

cyberful/cyberful

Audit build and release pipelines for identity separation, source-to-artifact integrity, provenance, approval, promotion, signing, rollback, and production deployment controls.

cyberful/cyberful

Audit container runtime isolation across namespaces, capabilities, seccomp, mandatory access control, mounts, devices, daemon sockets, cgroups, identity, and host integration.

cyberful/cyberful

Audit secret issuance, storage, delivery, use, rotation, revocation, replication, logging, and break-glass controls across application and cloud systems.

cyberful/cyberful

Audit serverless applications for event-source authority, function identity, tenant context, data exposure, retry behavior, deployment controls, and unsafe service integrations.

cyberful/cyberful

Test authorized retrieval-augmented generation boundaries for tenant isolation, corpus attribution, retrieval integrity, poisoned-content influence, citation fidelity, and protected-data crossover…

cyberful/cyberful

Test authorized serverless event handlers for source authority, signature and replay controls, tenant binding, schema validation, retry behavior, idempotency, and side-effect isolation using bounded…

cyberful/cyberful

Assess identity trust topology, assurance boundaries, issuer and relying-party responsibilities, and failure containment before testing a specific authentication or authorization mechanism.

cyberful/cyberful

Audit where access policy is decided and enforced across source, configuration, services, caches, jobs, and data stores, including deny behavior and decision-input integrity.

cyberful/cyberful

Route a cloud-native security audit across effective IAM, infrastructure as code, build and release paths, containers, Kubernetes, serverless workloads, secrets, event sources, and control-plane…

cyberful/cyberful

Operate a managed Firefox/Marionette laboratory for privileged chrome-context experiments, content automation, real WebDriver windows, permission readback, and synthetic X11 clipboard controls.

cyberful/cyberful

Use the release-embedded MITRE ATT&CK snapshot as a threat-informed reasoning lens without allowing the framework to constrain novel vulnerability discovery.

cyberful/cyberful

Test account and authenticator recovery as an assurance transition, including proofing, channel changes, support overrides, replay resistance, and post-recovery invalidation.

cyberful/cyberful

Route an identity assessment across federation architecture, policy enforcement, identity and tenant propagation, workload identity, recovery assurance, linking, and provisioning.

cyberful/cyberful

Route file-ingestion security work across processing pipelines, deserialization and object binding, and SOAP or XML services.

cyberful/cyberful

Route HTTP intermediary testing across request normalization, web-cache behavior, and offline traffic evidence.

cyberful/cyberful

Test identity linking, invitation, merge, provisioning, deprovisioning, and account-association ceremonies for proof-of-control, tenant binding, uniqueness, lifecycle, and rollback failures using…

cyberful/cyberful

Test promotions, referrals, quotas, inventory, and entitlement invariants through authorized, bounded, reversible experiments with tester-controlled accounts and assets.

cyberful/cyberful

Deterministically reconcile bounded offline cloud control-plane snapshots to expose resource, public-access, principal, policy, encryption, logging, and lifecycle drift without querying a live…

cyberful/cyberful

Deterministically compare bounded offline release manifests to identify artifact, digest, provenance, signer, permission, dependency, and deployment-input changes that alter the reviewed security…

cyberful/cyberful

Index and query Cyberful's local semantic Code Graph for repository-wide audits, incremental secure reviews, assessments, remediation blast-radius analysis, symbol and call exploration…

cyberful/cyberful

Trace secret fingerprints through bounded offline configuration, deployment, log, and runtime snapshots to identify allowed placement, unexpected propagation, stale copies, and cleanup gaps without…

cyberful/cyberful