Security

a5c-ai Bundle

Establish project governing principles including dev guidelines, code quality standards, testing policies, UX requirements, performance benchmarks, and security constraints.

a5c-ai Bundle

CVE and CWE database querying and management

a5c-ai Bundle

STIX/TAXII threat intelligence format and sharing

a5c-ai Bundle

YARA rule creation, testing, and deployment

a5c-ai Bundle

OWASP Top 10, security headers, CSP, XSS prevention, and vulnerability prevention.

a5c-ai Bundle

Web application security testing with Burp Suite integration

a5c-ai Bundle

Comprehensive fuzzing operations with AFL++, libFuzzer, and OSS-Fuzz integration

a5c-ai Bundle

MITRE ATT&CK framework mapping and analysis

a5c-ai Bundle

Deep integration with Ghidra and IDA Pro for binary analysis and reverse engineering

a5c-ai Bundle

Expert skill for TLS/SSL implementation and certificate management. Generate and validate TLS configurations, create and manage X.509 certificates, analyze cipher suite security, debug TLS handshake failures, and implement certificate pinning.

a5c-ai Bundle

Dynamic Application Security Testing execution and management. Configure and execute OWASP ZAP and Nuclei scans, run authenticated scanning, manage scan policies and scope, correlate findings with SAST results, and generate comprehensive vulnerability reports.

a5c-ai Bundle

Static Application Security Testing orchestration and analysis. Execute Semgrep, Bandit, ESLint security plugins, CodeQL, and other SAST tools. Parse, prioritize, and deduplicate findings across multiple tools with remediation guidance.

a5c-ai Bundle

Android and iOS application security testing

a5c-ai Bundle

Bug bounty program management and security disclosure expertise for smart contracts. Covers program setup on Immunefi, vulnerability triage, responsible disclosure coordination, bounty payments, and post-disclosure analysis.

a5c-ai Bundle

Mobile application security skill for implementing OWASP MASVS compliance, secure storage, certificate pinning, biometric authentication, and security hardening across iOS and Android platforms.

a5c-ai Bundle

Exploit development automation using pwntools framework

a5c-ai Bundle

Cryptographic implementation analysis and validation for encryption algorithms, key sizes, and certificate management

a5c-ai Bundle

Hardware and embedded security research capabilities. Interface with JTAG debuggers, analyze SPI/I2C communications, dump and analyze firmware, support fault injection, side-channel analysis, and hardware exploitation research.

a5c-ai Bundle

Network protocol capture, analysis, and fuzzing capabilities

a5c-ai Bundle

Deep EVM bytecode analysis and decompilation capabilities for smart contract security, gas optimization, and reverse engineering. Provides tools for analyzing opcodes, storage layouts, proxy patterns, and bytecode verification.

a5c-ai Bundle

Expert usage of OpenZeppelin Contracts library for secure smart contract development. Covers access control, token standards, governance, upgrades, and security utilities.

a5c-ai Bundle

Deep expertise in Solidity language features, patterns, and best practices for secure smart contract development. Covers ERC standards, gas optimization, upgradeable contracts, and security patterns.

a5c-ai Bundle

Digital forensics and incident response capabilities. Analyze memory dumps with Volatility, parse filesystem artifacts, extract browser forensics, analyze Windows event logs, create forensic timelines, recover deleted files, and generate forensic reports.

a5c-ai Bundle

Offensive security tools and techniques integration

a5c-ai Bundle

Generate threat models using STRIDE, PASTA, or VAST methodologies

a5c-ai Bundle

Advanced binary exploitation and mitigation bypass

a5c-ai Bundle

AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.

a5c-ai Bundle

Software Composition Analysis (SCA) and dependency vulnerability scanning. Scan npm, pip, maven, gradle dependencies. Check CVE databases, generate SBOM (CycloneDX, SPDX), identify license compliance issues, and track EPSS scores for prioritization.

a5c-ai Bundle

Byte-level Unicode homoglyph detection for identifying invisible character substitutions in code

a5c-ai Bundle

Advanced debugging integration for vulnerability research

a5c-ai Bundle

Run security scans including SAST, dependency scanning, and secret detection

a5c-ai Bundle

On-chain analysis and transaction forensics for blockchain security investigations. Provides capabilities for tracing fund flows, identifying suspicious patterns, MEV analysis, and generating forensic reports for incident response.

a5c-ai Bundle

Continuous vendor security monitoring for security ratings, breach notifications, and risk change detection

a5c-ai Bundle

Integration with security-focused static analysis tools

a5c-ai Bundle

Validate OpenAPI specifications for correctness, security, and best practices

a5c-ai Bundle

Symbolic execution analysis using Mythril for deep vulnerability detection in smart contracts. Supports configurable transaction depth, timeout settings, and proof-of-concept exploit generation.