Security · For devops and sre engineers

Enumeration of infrastructure services: DNS, SMTP, SNMP, IPMI, NFS, TFTP, RPC/MSRPC, and HTTP/HTTPS surface detection.

blacklanternsecurity/red-run

Extracts and cracks Kerberos service tickets (Kerberoasting) and AS-REP hashes (AS-REP Roasting) for offline password recovery.

blacklanternsecurity/red-run

SMB share enumeration, access testing, password policy extraction, and content searching.

blacklanternsecurity/red-run

Create a prioritized security remediation plan from security assessment findings.

EmeaAppGbb/spec2cloud

Audit and harden Algolia credentials, record exposure, index restrictions, and tenant search controls.

jeremylongshore/tons-of-skills-marketplace

Review a Bright Data integration for least privilege, public-data authorization, secret containment, and controlled use.

jeremylongshore/tons-of-skills-marketplace

Secure your Anthropic integration — API key management, input validation, Use when working with security-basics patterns.

jeremylongshore/tons-of-skills-marketplace

Secure Clari identities, credentials, exported revenue data, Copilot content, and ingestion mutations.

jeremylongshore/tons-of-skills-marketplace

Harden ClickUp credentials, OAuth callbacks, Workspace boundaries, webhooks, logging, and incident response with least-privilege controls.

jeremylongshore/tons-of-skills-marketplace

Configure and audit security review capabilities as one layer in a defense-in-depth pull-request program.

jeremylongshore/tons-of-skills-marketplace

Issue an evidence-backed Cohere production go or no-go decision covering capacity, quality, security, operations, and rollback.

jeremylongshore/tons-of-skills-marketplace

Configure BYOK API keys for OpenAI, Anthropic, Google, Azure, and custom models in Cursor.

jeremylongshore/tons-of-skills-marketplace

Apply Deepgram security best practices for API key management and data protection.

jeremylongshore/tons-of-skills-marketplace

Threat-model Exa credentials, query intent, retrieved web content, generated output, and retained operational evidence as separate trust boundaries.

jeremylongshore/tons-of-skills-marketplace

Secure Firecrawl identities, targets, request options, webhooks, untrusted content, retention, logs, and self-hosted exposure.

jeremylongshore/tons-of-skills-marketplace

Analyze and harden Flexport credentials, tokens, webhook verification, data exposure, and mutation controls.

jeremylongshore/tons-of-skills-marketplace

Harden an Ideogram integration across credentials, untrusted media, content safety, copyright controls, storage, and tenant authorization.

jeremylongshore/tons-of-skills-marketplace

Harden Instantly API v2 keys, scopes, tenant boundaries, logs, webhooks, and operational access.

jeremylongshore/tons-of-skills-marketplace

Monitor and log API requests with correlation IDs, performance metrics, and security audit trails.

jeremylongshore/tons-of-skills-marketplace

Threat-model and harden Lucid API, Standard Import, editor extension, and data connector integrations.

jeremylongshore/tons-of-skills-marketplace

Threat-model Mistral credentials, untrusted content, model output, tools, files, and tenant access.

jeremylongshore/tons-of-skills-marketplace

Threat-model a Navan integration across identity, travel, expense, payment, file, and downstream systems.

jeremylongshore/tons-of-skills-marketplace

Pre-production readiness checklist for OCI — backup policies, security audit, key rotation, encryption, and Cloud Guard.

jeremylongshore/tons-of-skills-marketplace

Master OCI IAM policy syntax, common policy patterns, and API key management.

jeremylongshore/tons-of-skills-marketplace

Harden Persona API keys, identity data, inquiry sessions, webhook verification, and destructive redaction.

jeremylongshore/tons-of-skills-marketplace

Establish least-privilege OAuth, secret, webhook, data, card, and financial-write controls for a Ramp integration.

jeremylongshore/tons-of-skills-marketplace

Review RemoFirst account, group, report, connector, and worker-data controls.

jeremylongshore/tons-of-skills-marketplace

Harden Runway keys, organization access, prompts, media, generated outputs, and support evidence.

jeremylongshore/tons-of-skills-marketplace

Detect API security vulnerabilities including injection, broken auth, and data exposure.

jeremylongshore/tons-of-skills-marketplace

Threat-model a WebContainer or StackBlitz embed across host, runtime, user-code, filesystem, dependency, network, preview, secret, and persistence boundaries.

jeremylongshore/tons-of-skills-marketplace

Enforce organizational governance for Supabase projects: shared RLS policy library with reusable templates, table and column naming conventions, migration review process with CI checks, cost alert…

jeremylongshore/tons-of-skills-marketplace

Harden Snagit and Camtasia automation around capture consent, license secrecy, local storage, share destinations, least privilege, and artifact review.

jeremylongshore/tons-of-skills-marketplace

Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response.

jeremylongshore/tons-of-skills-marketplace

Configure TwinMind across development, staging, and production environments with separate accounts and API key management.

jeremylongshore/tons-of-skills-marketplace

Apply Vercel security best practices for secrets, headers, and access control.

jeremylongshore/tons-of-skills-marketplace

Executes joiner, mover and leaver processes — provisioning, group membership, access changes on role change, and complete deprovisioning.

cbrock84/headcount

Reviews a design or change for security before it ships — authentication and authorization, data handling, secrets, dependencies, and the secure-development practices around it.

cbrock84/headcount

Manages the flow of goods and inputs — sourcing, inventory, lead times, fulfillment, and supply risk.

cbrock84/headcount

Identifies what could go wrong in a system before it is built or changed — the assets worth attacking, the entry points, the trust boundaries, and the controls that actually address the realistic…

cbrock84/headcount

Configure Claude Code sandbox network isolation with trusted domains, custom access policies, and environment variables

Microck/ordinary-claude-skills

Orchestrate multiple Antigravity skills through guided workflows for SaaS MVP delivery, security audits, AI agent builds, and browser QA.

aiskillstore/marketplace

STRIDE threat modeling, DREAD risk scoring, secret detection, and secure architecture design.

borghei/Claude-Skills

Audit trending repos for real exploitable vulnerabilities and disclose responsibly — Private Vulnerability Reporting for code flaws and verified secrets, public PRs only for already-disclosed…

BankrBot/skills

Audit or harden a defined application-security attack surface when the user explicitly requests a security audit, vulnerability investigation, or scoped security-hardening pass.

swyxio/skills

Supply Chain Bottleneck Analyzer for Shopify/DTC stores. An agent skill from nexscope-ai/eCommerce-Skills.

nexscope-ai/eCommerce-Skills

Supply Chain Bottleneck Analyzer for Walmart Marketplace sellers.

nexscope-ai/eCommerce-Skills

Supply Chain Optimization (Lite) - Diagnose bottlenecks and provide cost reduction strategies through conversation

nexscope-ai/eCommerce-Skills

Supply Chain Bottleneck Analyzer for TikTok Shop sellers. An agent skill from nexscope-ai/eCommerce-Skills.

nexscope-ai/eCommerce-Skills