Results for “security”

Find similar vulnerabilities and bugs across codebases using pattern-based analysis after identifying an initial issue.

Use Pacu modules for AWS privilege escalation, persistence, and backdooring during authorized penetration tests.

Build and run custom fuzzers with LibAFL, a modular Rust fuzzing library, including drop-in libFuzzer replacement and custom component configuration.

Guides HIPAA-specific healthcare privacy and security work, routing to implementation and review skills with decision gates and guardrails.

Configures and runs static analysis and linting tools across multiple languages, integrating with CI/CD and security platforms.

Run the Legal Builder Hub security-review gate on a candidate legal skill — inspect its manifest and body for unsafe behavior before any install is allowed.

Use with analysis-agent, task-agent, or review-agent for task-local authentication lifecycle and recovery risk. Do not use without that decision or as task owner.

Use when the user wants to extract reusable offensive security knowledge from any source and generate a SKILL.md file. Trigger on: "distill this", "extract skill from", "turn this into a skill", "generate skill from", "convert this report/blog/book/walkthrough into a skill", or when the user pastes raw security content (bug report, pentest report, CTF writeup, blog post, ezine, book chapter) and wants it transformed into structured hunting methodology.

Watch, audit, and fix another agent's work by reconstructing the original request, inspecting evidence, and reporting gaps.

Manage environment variables and secrets securely in Claude Code sessions, ensuring sensitive values are never exposed in logs, diffs, or context.

Guides fuzzers with domain-specific tokens to reach deeper code paths in parsers, protocol handlers, and file format processors.

Detect and prevent public-over-private name resolution in npm, PyPI, and Maven dependency manifests.

Create and manage Kubernetes workloads with declarative YAML manifests, covering deployments, networking, security, storage, Helm charts, and troubleshooting.

Guides securing and deploying the Dify platform in production, covering SSRF protection, code sandboxing, Docker/Kubernetes deployment, monitoring, and recovery.

Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.

Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.

Designs and implements CI/CD pipelines, automating build, test, and deployment processes with security scanning and deployment strategies.

Verifies a code change before it lands by scanning the staged diff, running tests, and delegating to an independent reviewer.

Scans a single file against the OWASP Top 10:2025, tracks cross-file connections, and maintains a persistent findings record.

Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.

AI security and safety specialist for guardrails and adversarial resilience. Use when the user asks to talk to Snape, requests a safety audit, or needs guardrails design.

AI-powered Claude Code skill that performs deep code review using formal logic and reasoning frameworks to detect bugs, anti-patterns, and security risks beyond what linters catch.

Initialize GitHub repositories with standard files and configuration. Generates LICENSE, CONTRIBUTING.md, SECURITY.md, issue/PR templates, CI config, and .gitignore. Detects project type and adapts templates accordingly.

Expert SOC 2 compliance assistant covering all five Trust Services Criteria (Security/CC, Availability/A, Confidentiality/C, Processing Integrity/PI, Privacy/P). Use this skill whenever a user mentions SOC 2, Trust Services Criteria, SOC 2 Type 1 or Type 2, audit readiness, compliance gaps, control documentation, evidence collection, vendor risk questionnaires, or anything related to AICPA service organization controls. Trigger even for adjacent topics like "we need to get audited", "a customer asked for our security report", "writing an information security policy", or "preparing for an audit". Covers gap analysis, policy writing, control documentation, audit evidence preparation, and vendor risk reviews for organizations at any maturity level — from first-time startups to seasoned compliance teams.

Store, retrieve, and manage secrets like passwords, API keys, and connection strings using Azure Key Vault with the Java SDK.

Create optimized multi-stage Dockerfiles for any language or framework, following best practices for smaller, more secure container images.

Configure and run Nessus vulnerability scans, analyze results, and integrate scanning into continuous vulnerability management workflows.

Hunt for spearphishing campaign indicators across email logs, endpoint telemetry, and network data to detect targeted email attacks.

Automate phishing incident response by creating Splunk SOAR containers, adding artifacts, and triggering investigation playbooks.

Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.

Routes software engineering tasks across backend, frontend, AI/ML, mobile, DevOps, and infrastructure sub-skills, applying security and ethics gates.

Curated collections of agent skills organized by role and expertise level, from essentials to security, web development, AI, and game development.

Guides contributors through creating pull requests that add or fix skills, with a checklist covering metadata validation, risk labeling, and security disclaimers.

Guides backend development across API design, authentication, security, performance, architecture, and testing, with decision guides and defaults for production-ready systems.

Configures and secures Spring Boot Actuator HTTP endpoints, including custom paths, ports, SSL, authentication, and CORS.

Orchestrates AI/ML workflows for building LLM applications, RAG systems, AI agents, and ML pipelines, covering design, integration, observability, and security.