Security

j4flmao Skill

Adopts the persona of a Principal SOC Analyst for defensive security monitoring and incident response.

j4flmao Bundle

Use this skill when the user asks about penetration testing, pentest, security assessment, vulnerability assessment, bug bounty, ethical hacking, or red team operations.

j4flmao Bundle

Use this skill when performing compliance audits (SOC2, ISO 27001, GDPR, HIPAA, PCI). This skill enforces: control mapping, evidence collection, audit readiness, continuous monitoring. Do NOT use for: internal security reviews, vulnerability scans, pen test execution.

j4flmao Skill

Red Team Operations

j4flmao Bundle

Use this skill when the user says 'Dependabot', 'Renovate', 'dependencies', 'lock file', 'vulnerability scanning', 'update strategy', 'Renovate config', 'dependabot.yml', 'dependency bump', 'automated updates', 'version pinning', 'patch management', 'supply chain security', 'npm audit', 'SBOM'. Covers: Dependabot configuration, Renovate configuration, lock file management, vulnerability scanning, update strategy, dependency policy. Do NOT use this for: monorepo workspace configuration, package.json structure, or dependency graph visualization (use monorepo skill).

j4flmao Bundle

Use this skill when implementing identity provider solutions: SSO, federation, directory sync, and access governance. This skill enforces: IdP selection, SSO configuration, directory synchronization, MFA enforcement. Do NOT use for: application-level auth, password policies, TLS configuration, network security.

j4flmao Skill

Blue Team Operations

j4flmao Skill

Reverse Engineering (RE)

j4flmao Bundle

Manage threat intelligence feeds, IoC/TTP management, threat hunting, and MITRE ATT&CK mapping. Use when the user asks about threat intelligence, CTI, threat feed, IoC, TTP, MITRE ATT&CK, threat hunting, or intelligence lifecycle.

j4flmao Bundle

Use this skill when asked about blockchain security, smart contract auditing, DeFi threat modeling, blockchain incident response, bug bounty programs, economic security, formal verification of smart contracts, and blockchain-specific security analysis. Languages: Solidity, Python, Rust, Haskell. Covers threat modeling for DeFi protocols (STRIDE for blockchain), audit methodology (scope, manual review, tooling, report), incident response (emergency pause, fork coordination, compensation), bug bounty programs (Immunefi, Code4rena), economic security (game theory, incentive analysis, MEV), and formal verification (Certora CVL, Halmos, Scribble). References shared skills from skills/security/ (threat-intelligence, secrets-management, siem-engineering) and skills/quality/ (property-based-testing) where core concepts overlap. Do NOT use for: general smart contract testing (use blockchain-testing), standard application security (use skills/security/ skills), or core cryptography (use blockchain-cryptography).

j4flmao Skill

Understand the theoretical frameworks of offensive security, OSINT, and attack lifecycles.

j4flmao Skill

Detection Engineering

j4flmao Bundle

Use this skill when the user says 'audit log', 'audit trail', 'compliance logging', 'tamper-evident log', 'immutable log', 'audit table', 'change tracking', 'who changed what', 'data provenance', 'audit events', 'reporting log'. This skill implements immutable audit trails for compliance (SOC 2, SOX, HIPAA, GDPR). Applies to any backend stack. Do NOT use for: application logging (error logs, debug logs), metrics, or tracing.

j4flmao Bundle

Use this skill when the user says 'multi-tenancy', 'SaaS', 'tenant isolation', 'row-level security', 'DB per tenant', 'schema per tenant', 'tenant provisioning', 'tenant migration', 'multi-tenant database', 'tenant context'. This skill implements tenant isolation strategies: row-level, schema-per-tenant, and DB-per-tenant with provisioning and migration. Applies to any backend stack. Do NOT use for: single-tenant applications, IAM/authentication, or RBAC within a single organization.

j4flmao Bundle

Use this skill when the user says 'event sourcing', 'event store', 'event stream', 'event sourced', 'rehydrate from events', 'event replay', 'projection rebuild', 'event log', 'append-only log', 'event history'. This skill enforces: events as the single source of truth, current state derived from event replay, append-only event store, immutable events, event versioning, projection rebuild from scratch. Applies to any backend stack. Do NOT use for: simple audit logging, message queues, or CQRS without event sourcing.

j4flmao Skill

Theoretical mechanics of critical web vulnerabilities, static analysis, and secure architecture remediation.

cyberstrikeus Skill

Setting Security Lifecycle Listener (Automated)

itsual Skill

Understand when and how to use a service mesh for traffic management, security, and observability between services. Use when evaluating or implementing Istio, Linkerd, Consul Connect, or similar technologies.

itsual Skill

Persist state as a sequence of events rather than mutable current-state only, enabling audit, replay, and temporal queries. Use when auditability, time-travel, or complex domain event history is a core requirement.

itsual Skill

Encode organizational, security, and operational policies as code so they can be versioned, tested, and automatically enforced. Use when implementing automated guardrails for infrastructure, deployments, or configuration.

itsual Skill

Systematically identify and prioritize security threats to a system and decide on mitigations. Use when designing new systems, reviewing architecture, or improving security posture of existing systems.

itsual Skill

Harden email as a control plane — authentication (SPF/DKIM/DMARC), filtering, BEC controls, and secure handling of high-risk messages. Use when reducing phishing success, business email compromise, or spoofing risk.

itsual Skill

Apply intelligence-led, threat-led penetration testing (TLPT) approaches in the spirit of TIBER-EU/CBEST — critical functions, CTI scenarios, controlled live testing, and structured closure. Use when designing or preparing for regulatory-style red teaming in financial or critical-entity contexts.

itsual Skill

Make builds deterministic so the same source inputs always produce bit-for-bit identical artifacts when desired. Use when strengthening supply-chain security, enabling verification, or debugging “works on my machine” build differences.

itsual Skill

Generate, maintain, and consume Software Bills of Materials (SBOMs) and build provenance to improve transparency and security. Use when implementing supply-chain transparency, compliance requirements, or vulnerability management at scale.

itsual Skill

Plan and run adversary emulation — CTI-driven scenarios mapped to MITRE ATT&CK TTPs, executed under controls, and measured for prevention and detection outcomes. Use when testing defenses against specific threat actors or technique chains rather than generic vulnerability hunting.

itsual Skill

Design and enforce Rules of Engagement (RoE) for offensive security tests — scope, allowed TTPs, safety stops, deconfliction, and legal authority. Use before any red team, adversary emulation, or high-impact offensive exercise.

itsual Skill

Manage third-party dependencies safely: minimize surface area, keep lockfiles honest, audit regularly, and upgrade deliberately. Use when adding, updating, or reviewing dependencies, or when addressing vulnerability reports.

itsual Skill

Protect the software supply chain from compromised dependencies, build systems, and distribution channels. Use when reviewing dependencies, build pipelines, artifact signing, or responding to supply-chain threats.

itsual Skill

Apply zero-trust principles (never trust, always verify) to system design, identity, and network architecture. Use when designing secure systems, reviewing access patterns, or moving away from perimeter-based security.

itsual Skill

Perform security-focused review and hardening of code, configurations, and designs. Use when reviewing authentication, authorization, input handling, secrets, dependencies, or any security-sensitive change. Also trigger on requests involving OWASP, threat modeling, secure coding, or vulnerability concerns.

itsual Skill

Design security architecture that embeds controls into systems — patterns for isolation, secure boundaries, and scalable guardrails. Use when reviewing enterprise or product security architecture or setting reference patterns for teams.

itsual Skill

Write clear, factual incident reports that document what happened, impact, response, root causes, and follow-up actions. Use after operational, security, safety, or customer-impacting incidents when a formal written record is required.

j4flmao Bundle

Cross-chain protocols, IBC, LayerZero, Wormhole, Axelar, CCIP, bridges, atomic composability, shared sequencer, cross-chain message passing. Covers trust models (light clients, external validators, ZK proofs), bridge security, token representation (canonical, wrapped, native), relayer economics, and cross-chain application design. Do NOT use for: single-chain application development (use blockchain-application), general blockchain patterns (use blockchain-patterns), or core protocol design (use blockchain-core).

j4flmao Skill

Purple Team Collaboration

j4flmao Bundle

Use this skill when asked about cryptographic primitives in blockchain, elliptic curve cryptography, hash functions, Merkle trees, digital signatures, zero-knowledge proofs, key derivation, BIP standards, and blockchain-specific crypto implementations. Languages: C++, Rust, Go, Python. Covers secp256k1, BN254, BLS12-381, Ed25519, SHA-256, Keccak-256, BLAKE2, Poseidon, Merkle trees (binary, Patricia, sparse, Verkle), ECDSA, Schnorr, BLS, threshold signatures (FROST, GG20), zk-SNARKs/STARKs/Bulletproofs, HD wallets (BIP-32/39/44), PSBT (BIP-174), and signature aggregation. Do NOT use for: general blockchain protocols (use blockchain-core), smart contract development (use blockchain-application), or standard web security cryptography outside blockchain.