Results for “safe-control”
39 skills
mukul975-2 Hipaa Security Rule
Implements HIPAA Security Rule technical safeguards under 45 CFR §164.312 for electronic protected health information. Covers access controls with unique user identification, emergency access procedures, automatic logoff, encryption, audit controls, integrity controls, and transmission security. Keywords: HIPAA Security Rule, ePHI, access controls, encryption, audit controls, technical safeguards.
228 · bundle
mukul975 Performing Ot Vulnerability Scanning Safely
Perform vulnerability scanning in OT/ICS environments safely using passive monitoring, native protocol queries, and carefully controlled active scanning with Tenable OT Security to identify vulnerabilities without disrupting industrial processes or crashing legacy controllers.
24.6k · bundle
aiweline Acl
Security engineer skill for backend ACL structure, menu visibility control, and administrative access safety.
1
More results
mukul975 Implementing Continuous Security Validation With Bas
Deploy Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulating real-world attack techniques across the kill chain.
24.6k · bundle
mukul975 Implementing Security Chaos Engineering
Deliberately disables or degrades security controls to verify detection and response capabilities, including WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement scenarios using boto3 and subprocess.
24.6k · bundle
affaan-m Safety Guard
Prevents destructive operations on production systems and restricts file edits to a specific directory when running agents autonomously.
226k
github Agent Governance
Add governance, safety, and trust controls to AI agent systems with policy enforcement, intent classification, and audit trails.
36.2k
neuralblitz AI Safety
Implements AI safety guardrails including input validation, output filtering, robustness testing, human oversight, and monitoring to prevent harmful outputs and ensure system reliability.
1
mukul975 Detecting T1548 Abuse Elevation Control Mechanism
Detect abuse of elevation control mechanisms including UAC bypass, sudo exploitation, and setuid/setgid manipulation by monitoring registry modifications, process elevation flags, and unusual parent-child process relationships.
24.6k · bundle
mesteriis Security
Implements security-sensitive changes with conservative trust boundaries, secret protection, tests, and verification.
0
jeffallan Secure Code Guardian
Guides implementing authentication, authorization, input validation, and OWASP Top 10 prevention with secure code patterns and validation checkpoints.
10.4k · bundle
mhassan0000 Safety Guard
Prevents destructive operations on production systems and restricts edits to a specified directory when running agents autonomously.
1
mukul975 Implementing Devsecops Security Scanning
Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.
24.6k · bundle
zhaoxuya520 Supply Chain Security
Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
12.8k · bundle
solizardking Pump Security
Security Practices — Cryptographic Safety, Memory Zeroization & Hardened I/O
0
winbda Soc Design
Design Security Operations Centers with processes. TRIGGERS - Use when user needs help with soc-design related tasks.
3
chimeranext Security Compliance Automation
Automates security and compliance checks using OPA policies, Trivy vulnerability scanning, AWS CIS benchmark verification, and Kubernetes remediation scripts.
4 · bundle
alirezarezvani Secrets Vault Manager
Manage production secret infrastructure with HashiCorp Vault, cloud secret stores, automated rotation, and audit logging.
20.4k · bundle
mukul975 Detecting Anomalies In Industrial Control Systems
Deploys anomaly detection for industrial control environments using machine learning models trained on OT network baselines, physics-based process models, and behavioral analysis of industrial protocol communications.
24.6k · bundle
lionelsimai Soc Design
Design Security Operations Centers with processes. TRIGGERS - Use when user needs help with soc-design related tasks.
22
mukul975 Implementing Conduit Security For Ot Remote Access
Design and deploy IEC 62443-compliant conduit architecture for secure OT remote access, including jump servers, MFA gateways, session recording, and approval-based workflows for vendor and engineer access to industrial control systems.
24.6k · bundle
mukul975 Performing Access Recertification With Saviynt
Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC2, and HIPAA.
24.6k · bundle
mukul975 Performing Bandwidth Throttling Attack Simulation
Simulates bandwidth throttling and network degradation attacks using tc, iperf3, and Scapy in authorized environments to test quality-of-service controls, application resilience, and network monitoring detection of traffic manipulation attacks.
24.6k · bundle
mukul975 Implementing API Key Security Controls
Generates, stores, validates, rotates, and revokes API keys with secure hashing, scoping, rate limiting, and leak monitoring.
24.6k · bundle
mukul975 Testing For Broken Access Control
Systematically test web applications for broken access control vulnerabilities including privilege escalation, missing function-level checks, and insecure direct object references.
24.6k · bundle
alirezarezvani Senior Secops
Run security audits, vulnerability scans, compliance checks, and incident response workflows for application security.
20.4k · bundle
lucassantana-dev Security Sweep
Composite skill — full security pass across secrets, dependencies, code paths, and OWASP risks. Chains security-audit (broad) + socket-audit (npm supply chain) + semgrep (pattern scan) + code-security (code review for vulns) in parallel, reconciles into one severity-ranked report with remediation plan. Use quarterly per active repo or before any release of security-sensitive code.
1 · bundle
mukul975 Implementing Nerc Cip Compliance Controls
Categorize BES cyber systems and implement NERC CIP compliance controls for high, medium, and low impact assets, including electronic security perimeters, configuration management, and supply chain risk management.
24.6k · bundle
leandrobenjaminl Security Auditor
Automated security auditing covering SAST, DAST, dependency scanning, secret detection, container hardening, and compliance checks before deployments or when integrating new dependencies.
0
aibot88 Csp
Content Security Policy configuration, nonces, and reporting.
3 · bundle
x402agent Pump Security
Defense-in-depth security across Rust, TypeScript, and Bash for the Pump SDK — cryptographic key handling, memory zeroization, secure file I/O, input validation, privilege management, dependency auditing, and a 60+ item security checklist.
9
zhaoxuya520 Ot Ics
Authorized OT/ICS security assessment covering Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and safe passive-first evaluation.
12.8k · bundle
anantha-236 Safety Guard
Prevents destructive operations when working on production systems or running agents autonomously by intercepting risky commands and restricting file edits to a specified directory.
1
zhaoxuya520 Code Audit
Performs authorized source-code security reviews using SAST tools like Semgrep and CodeQL, with manual verification of findings and fix recommendations.
12.8k · bundle
rulebase-co Cx Control Testing
Use to test whether a support control actually operates, the way an auditor would test it, rather than confirming it exists on paper. Trigger for "test our controls", "does this control actually work", second-line assurance over support, control effectiveness testing, preparing for an internal audit, or a control that passed review and then failed in practice.
1
srednoff888-art Supply Chain Sbom Sca
Use this skill for SBOM, SCA, lockfile review, provenance, package integrity, supply-chain risk. Trigger when the task involves security work related to Supply Chain SBOM SCA, implementation, audits, debugging, strategy, or validation.
1 · bundle