Security · For devops and sre engineers

Full Go CVE analysis workflow. An agent skill from openshift-eng/ai-helpers.

openshift-eng/ai-helpers

A skill your agent uses when the user asks about available workflow skills, wants an overview of the engineering workflow, or references "nanostack".

garagon/nanostack

A skill your agent uses when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity.

vlinx-io/VelaTerm

A skill your agent uses when Codex is already in the validation phase of a security scan or the user explicitly asks to determine whether one or more candidate security findings are valid.

vlinx-io/VelaTerm

Safely simulates and applies Identity and Access Management (IAM) v1 (Allow) policy changes on Google Cloud.

google/skills

Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF).

google/skills

Inkline's platform & trust surface — the styleframe license boundary, supply-chain and secrets hygiene, npm distribution integrity, and the future Studio/commercial direction.

inkline/inkline

Passively map a company's domains, subdomains, DNS ownership, tech stack, and CDNs.

forefy/.context

NCAA cross country and track & field athlete data via TFRRS (tfrrs.org) and news via The Stride Report.

machina-sports/sports-skills

Design and plan end-to-end Azure IoT and Smart City solutions: requirements, architecture, security, operations, cost, and a phased delivery plan with concrete implementation artifacts.

github/awesome-copilot

A skill your agent uses when performing initial audit reconnaissance.

ccashwell/evm-cortex

Guide to enabling SSL/TLS, configuring HTTPS, handling certificates, and securing transport layers.

HashLoad/horse

Security vulnerability detection and variant analysis skill.

sendaifun/skills

Build a CodeQL database and run dataflow-backed query-suite analysis via the mantiscodeql MCP server

deonmenezes/mantishack

Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.

sickn33/agentic-awesome-skills

Authorized source-code security review and SAST workflows: Semgrep and CodeQL pattern hunting, dangerous API identification, and fix verification.

sickn33/agentic-awesome-skills

Cross-chain relayer bridge audit register: message hash verifications, replay protection nonces, validator quorum, and withdrawal proofs.

sickn33/agentic-awesome-skills

Run read-only exposure checks for security advisories and write a structured local audit report.

sickn33/agentic-awesome-skills

External SSL VPN / remote-access appliance attack matrix. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Manage secrets and PKI with HashiCorp Vault. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Hunting skill for auth bypass vulnerabilities. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Hunt cloud / infrastructure misconfigurations. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Reviews code for objective correctness, security, and reliability.

sickn33/agentic-awesome-skills

Harden OpenClaw self-hosted environments with baseline host controls, auth tightening, secret handling, network segmentation, and safe update/rollback workflows.

sickn33/agentic-awesome-skills

Triage ASM/recon output for ownership before testing. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Reference document for monopoly security-checklist. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Blue-team threat hunting: detection engineering with Sigma/YARA, SIEM query design, and validation of incident detections against known technique patterns.

sickn33/agentic-awesome-skills

Scan systems and dependencies for CVEs and security vulnerabilities.

sickn33/agentic-awesome-skills

Zero-knowledge cryptographic verification pipeline register: proving system, circuit verification keys, public inputs, and gas costs.

sickn33/agentic-awesome-skills

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score…

mukul975/Anthropic-Cybersecurity-Skills

Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.

mukul975/Anthropic-Cybersecurity-Skills

Configures TLS 1.3 (RFC 8446) on servers, covering cipher suite and key-exchange group selection, and validates the resulting configuration with openssl sclient and testssl.sh.

mukul975/Anthropic-Cybersecurity-Skills

Plan, run, and measure an adversary engagement operation using the MITRE Engage framework so that deployed deception is driven by strategy instead of deployed ad hoc.

mukul975/Anthropic-Cybersecurity-Skills

Detect Business Email Compromise (BEC) fraud, where attackers impersonate executives or vendors to trick employees into wire transfers or data disclosure without malicious links, using email gateway…

mukul975/Anthropic-Cybersecurity-Skills

Detect NTLM relay attacks (T1557.001) by correlating Windows Event 4624 LogonType 3 for IP-to-hostname mismatches, identifying Responder/LLMNR poisoning artifacts, auditing SMB/LDAP signing, and…

mukul975/Anthropic-Cybersecurity-Skills

Detect and prevent QR code phishing (quishing) attacks that embed malicious URLs inside QR code images to bypass link-based email security, using image-based threat detection, OCR/QR decoding, and…

mukul975/Anthropic-Cybersecurity-Skills

Drive a federal system through the NIST Risk Management Framework (SP 800-37 Rev 2) to an Authorization to Operate (ATO): Prepare, Categorize (FIPS 199), Select a control baseline (FIPS 200 / SP…

mukul975/Anthropic-Cybersecurity-Skills

Hunt for spearphishing campaign indicators across email logs, endpoint telemetry, and network data to detect targeted email attacks.

mukul975/Anthropic-Cybersecurity-Skills

Build AWS Nitro Enclave confidential computing environments using nitro-cli to create enclave images, configure attestation-aware KMS policies with PCR condition keys, validate attestation documents…

mukul975/Anthropic-Cybersecurity-Skills

The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features - Adversary, Capability, Infrastructure, and Victim.

mukul975/Anthropic-Cybersecurity-Skills

Implements digital signatures using the Ed25519 algorithm (Curve25519), covering key-pair generation, signing, signature verification, and security tradeoffs versus RSA and ECDSA.

mukul975/Anthropic-Cybersecurity-Skills

Email sandboxing detonates suspicious attachments and URLs in isolated environments to detect zero-day malware and evasive phishing payloads.

mukul975/Anthropic-Cybersecurity-Skills

Implements a simplified Signal Protocol-style end-to-end encryption scheme for messaging, covering key exchange, forward secrecy, and the core cryptographic components so no server or intermediary…

mukul975/Anthropic-Cybersecurity-Skills

Implements envelope encryption with AWS KMS, encrypting data locally with a data encryption key (DEK) and protecting that DEK with a KMS-managed key (KEK), covering the encrypt/decrypt flow, KMS key…

mukul975/Anthropic-Cybersecurity-Skills

Implements Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access, covering approval workflows, automatic expiration/revocation, and PAM/IGA…

mukul975/Anthropic-Cybersecurity-Skills

Implement MITRE ATT&CK coverage mapping to identify detection gaps, prioritize rule development, and measure SOC detection maturity against adversary techniques.

mukul975/Anthropic-Cybersecurity-Skills

Queries Arkime (formerly Moloch) full packet capture via its API to search sessions, download PCAPs, detect C2 beaconing through connection interval/jitter stats, spot DNS tunneling via query-length…

mukul975/Anthropic-Cybersecurity-Skills

Patch management is the systematic process of identifying, testing, deploying, and verifying software updates to remediate vulnerabilities across an organization's IT infrastructure.

mukul975/Anthropic-Cybersecurity-Skills