← all publishers

micsapp

@micsapp source repo

Report this profile Claim this profile

• 3.2k skills
• 0 followers
• 3 repo stars
• last month last updated

1. ▌
   Tensorflow Model Trainer · micsapp

   Build tensorflow model trainer operations. Auto-activating skill for ML Training. Triggers on: tensorflow model trainer, tensorflow model trainer Part of the ML Training skill category. Use when working with tensorflow model trainer functionality. Trigger with phrases like "tensorflow model trainer", "tensorflow trainer", "tensorflow".
   3 repo stars
2. ▌
   Airflow Dag Generator · micsapp

   Generate airflow dag generator operations. Auto-activating skill for Data Pipelines. Triggers on: airflow dag generator, airflow dag generator Part of the Data Pipelines skill category. Use when working with airflow dag generator functionality. Trigger with phrases like "airflow dag generator", "airflow generator", "airflow".
   3 repo stars
3. ▌
   Compression Optimizer · micsapp

   Optimize compression optimizer operations. Auto-activating skill for Data Pipelines. Triggers on: compression optimizer, compression optimizer Part of the Data Pipelines skill category. Use when working with compression optimizer functionality. Trigger with phrases like "compression optimizer", "compression optimizer", "compression".
   3 repo stars
4. ▌
   File Format Converter · micsapp

   Convert file format converter operations. Auto-activating skill for Data Pipelines. Triggers on: file format converter, file format converter Part of the Data Pipelines skill category. Use when working with file format converter functionality. Trigger with phrases like "file format converter", "file converter", "file".
   3 repo stars
5. ▌
   Churn Analysis Helper · micsapp

   Configure with churn analysis helper operations. Auto-activating skill for Data Analytics. Triggers on: churn analysis helper, churn analysis helper Part of the Data Analytics skill category. Use when working with churn analysis helper functionality. Trigger with phrases like "churn analysis helper", "churn helper", "churn".
   3 repo stars
6. ▌
   Kpi Definition Helper · micsapp

   Configure with kpi definition helper operations. Auto-activating skill for Data Analytics. Triggers on: kpi definition helper, kpi definition helper Part of the Data Analytics skill category. Use when working with kpi definition helper functionality. Trigger with phrases like "kpi definition helper", "kpi helper", "kpi".
   3 repo stars
7. ▌
   Lambda Function Generator · micsapp

   Generate lambda function generator operations. Auto-activating skill for AWS Skills. Triggers on: lambda function generator, lambda function generator Part of the AWS Skills skill category. Use when working with lambda function generator functionality. Trigger with phrases like "lambda function generator", "lambda generator", "lambda".
   3 repo stars
8. ▌
   Bigquery Ml Model Creator · micsapp

   Create bigquery ml model creator operations. Auto-activating skill for GCP Skills. Triggers on: bigquery ml model creator, bigquery ml model creator Part of the GCP Skills skill category. Use when working with bigquery ml model creator functionality. Trigger with phrases like "bigquery ml model creator", "bigquery creator", "bigquery".
   3 repo stars
9. ▌
   Vertex AI Endpoint Config · micsapp

   Configure vertex ai endpoint config operations. Auto-activating skill for GCP Skills. Triggers on: vertex ai endpoint config, vertex ai endpoint config Part of the GCP Skills skill category. Use when configuring systems or services. Trigger with phrases like "vertex ai endpoint config", "vertex config", "vertex".
   3 repo stars
10. ▌
    API Caching Strategy · micsapp

    Configure api caching strategy operations. Auto-activating skill for API Development. Triggers on: api caching strategy, api caching strategy Part of the API Development skill category. Use when working with APIs or building integrations. Trigger with phrases like "api caching strategy", "api strategy", "api".
    3 repo stars
11. ▌
    API Throttling Setup · micsapp

    Configure api throttling setup operations. Auto-activating skill for API Development. Triggers on: api throttling setup, api throttling setup Part of the API Development skill category. Use when working with APIs or building integrations. Trigger with phrases like "api throttling setup", "api setup", "api".
    3 repo stars
12. ▌
    API Client Generator · micsapp

    Generate api client generator operations. Auto-activating skill for API Integration. Triggers on: api client generator, api client generator Part of the API Integration skill category. Use when working with APIs or building integrations. Trigger with phrases like "api client generator", "api generator", "api".
    3 repo stars
13. ▌
    Error Mapping Helper · micsapp

    Configure with error mapping helper operations. Auto-activating skill for API Integration. Triggers on: error mapping helper, error mapping helper Part of the API Integration skill category. Use when working with error mapping helper functionality. Trigger with phrases like "error mapping helper", "error helper", "error".
    3 repo stars
14. ▌
    Response Transformer · micsapp

    Transform response transformer operations. Auto-activating skill for API Integration. Triggers on: response transformer, response transformer Part of the API Integration skill category. Use when working with response transformer functionality. Trigger with phrases like "response transformer", "response transformer", "response".
    3 repo stars
15. ▌
    Analyzing Apt Group With Mitre Navigator · micsapp bundle

    Analyze advanced persistent threat (APT) group techniques using MITRE ATT&CK Navigator to create layered heatmaps of adversary TTPs for detection gap analysis and threat-informed defense.
    3 repo stars
16. ▌
    Analyzing Linux Audit Logs For Intrusion · micsapp bundle

    Parse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python.
    3 repo stars
17. ▌
    Analyzing Network Flow Data With Netflow · micsapp bundle

    Parse NetFlow v9 and IPFIX records to detect volumetric anomalies, port scanning, data exfiltration, and C2 beaconing patterns. Uses the Python netflow library to decode flow records, builds traffic baselines, and applies statistical analysis to identify flows with abnormal byte counts, connection durations, and periodic timing patterns.
    3 repo stars
18. ▌
    Analyzing Network Traffic With Wireshark · micsapp bundle

    Captures and analyzes network packet data using Wireshark and tshark to identify malicious traffic patterns, diagnose protocol issues, extract artifacts, and support incident response investigations on authorized network segments.
    3 repo stars
19. ▌
    Analyzing Supply Chain Malware Artifacts · micsapp bundle

    Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise.
    3 repo stars
20. ▌
    Analyzing Windows Registry For Artifacts · micsapp bundle

    Extract and analyze Windows Registry hives to uncover user activity, installed software, autostart entries, and evidence of system compromise.
    3 repo stars
21. ▌
    Building Threat Actor Profile From Osint · micsapp bundle

    Build comprehensive threat actor profiles using open-source intelligence (OSINT) techniques to document adversary motivations, capabilities, infrastructure, and TTPs for proactive defense.
    3 repo stars
22. ▌
    Building Vulnerability Scanning Workflow · micsapp bundle

    Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security vulnerabilities across infrastructure. Use when SOC teams need to establish recurring vulnerability assessment processes, integrate scan results with SIEM alerting, and build remediation tracking dashboards.
    3 repo stars
23. ▌
    Collecting Threat Intelligence With Misp · micsapp bundle

    MISP (Malware Information Sharing Platform) is an open-source threat intelligence platform for gathering, sharing, storing, and correlating Indicators of Compromise (IOCs) of targeted attacks, threat
    3 repo stars
24. ▌
    Conducting Post Incident Lessons Learned · micsapp bundle

    Facilitate structured post-incident reviews to identify root causes, document what worked and failed, and produce actionable recommendations to improve future incident response.
    3 repo stars
25. ▌
    Configuring AWS Verified Access For Ztna · micsapp bundle

    Configure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identity and device posture verification with Cedar policy language.
    3 repo stars
26. ▌
    Detecting Ransomware Encryption Behavior · micsapp bundle

    Detects ransomware encryption activity in real time using entropy analysis, file system I/O monitoring, and behavioral heuristics. Identifies mass file modification patterns, abnormal entropy spikes in written data, and suspicious process behavior characteristic of ransomware encryption routines. Activates for requests involving ransomware behavioral detection, entropy-based file monitoring, I/O anomaly detection, or real-time encryption activity alerting.
    3 repo stars
27. ▌
    Evaluating Threat Intelligence Platforms · micsapp bundle

    Evaluates and selects Threat Intelligence Platform (TIP) products based on organizational requirements including feed integration capability, STIX/TAXII support, workflow automation, analyst interface, and total cost of ownership. Use when conducting a TIP procurement, migrating between TIP solutions, or assessing whether the current TIP meets program maturity requirements. Activates for requests involving ThreatConnect, MISP, OpenCTI, Anomali, EclecticIQ, or TIP procurement decisions.
    3 repo stars
28. ▌
    Exploiting API Injection Vulnerabilities · micsapp bundle

    Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF) through API parameters, headers, and request bodies. The tester crafts malicious payloads targeting different backend technologies and injection contexts to extract data, execute commands, or access internal services. Maps to OWASP API8:2023 Security Misconfiguration and API7:2023 SSRF. Activates for requests involving API injection testing, SQLi in APIs, NoSQL injection, SSRF testing, or API input validation assessment.
    3 repo stars
29. ▌
    Exploiting Bgp Hijacking Vulnerabilities · micsapp bundle

    Analyzes and simulates BGP hijacking scenarios in authorized lab environments to assess route origin validation, RPKI deployment, and BGP monitoring defenses against prefix hijacking and route leak attacks on internet routing infrastructure.
    3 repo stars
30. ▌
    Exploiting SQL Injection Vulnerabilities · micsapp bundle

    Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap. The tester detects injection points through error-based, union-based, blind boolean, and time-based blind techniques across all major database engines (MySQL, PostgreSQL, MSSQL, Oracle) to demonstrate data extraction, authentication bypass, and potential remote code execution. Activates for requests involving SQL injection testing, SQLi exploitation, database security assessment, or injection vulnerability verification.
    3 repo stars
31. ▌
    Exploiting Type Juggling Vulnerabilities · micsapp bundle

    Exploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent hash verification, and manipulate application logic through type coercion attacks.
    3 repo stars
32. ▌
    Hunting For Data Exfiltration Indicators · micsapp bundle

    Hunt for data exfiltration through network traffic analysis, detecting unusual data flows, DNS tunneling, cloud storage uploads, and encrypted channel abuse.
    3 repo stars
33. ▌
    Hunting For Living Off The Land Binaries · micsapp bundle

    Proactively hunt for adversary abuse of legitimate system binaries (LOLBins) to execute malicious payloads while evading detection.
    3 repo stars
34. ▌
    Hunting For Process Injection Techniques · micsapp bundle

    Detect process injection techniques (T1055) including CreateRemoteThread, process hollowing, and DLL injection via Sysmon Event IDs 8 and 10 and EDR process telemetry
    3 repo stars
35. ▌
    Hunting For Registry Run Key Persistence · micsapp bundle

    Detect MITRE ATT&CK T1547.001 registry Run key persistence by analyzing Sysmon Event ID 13 logs and registry queries to identify malicious auto-start entries.
    3 repo stars
36. ▌
    Implementing AWS Security Hub Compliance · micsapp bundle

    Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.
    3 repo stars
37. ▌
    Implementing Devsecops Security Scanning · micsapp bundle

    Integrate security scanning into CI/CD pipelines using tools like Semgrep, Trivy, and Gitleaks. Covers SAST, SCA, container scanning, and secret detection with structured JSON output for pipeline gates.
    3 repo stars
38. ▌
    Implementing LLM Guardrails For Security · micsapp bundle

    Implements input and output validation guardrails for LLM-powered applications to prevent prompt injection, data leakage, toxic content generation, and hallucinated outputs. Builds a security validation pipeline using NVIDIA NeMo Guardrails Colang definitions, custom Python validators for PII detection and content policy enforcement, and the Guardrails AI framework for structured output validation. The guardrails system intercepts both user inputs (blocking injection attempts, stripping PII, enforcing topic boundaries) and model outputs (detecting hallucinations, filtering toxic content, validating JSON schema compliance). Activates for requests involving LLM output validation, AI content filtering, guardrail implementation, or LLM safety enforcement.
    3 repo stars
39. ▌
    Implementing Log Forwarding With Fluentd · micsapp bundle

    Configure Fluentd and Fluent Bit for centralized log aggregation, routing, filtering, and enrichment across distributed infrastructure
    3 repo stars
40. ▌
    Implementing Network Segmentation For Ot · micsapp bundle

    This skill covers implementing network segmentation in Operational Technology environments using VLANs, industrial firewalls, data diodes, and software-defined networking. It addresses the Purdue Model-based segmentation strategy, migration from flat networks to segmented architectures without disrupting operations, configuring OT-aware firewalls with industrial protocol deep packet inspection, and validating segmentation effectiveness through traffic analysis.
    3 repo stars
41. ▌
    Implementing Pci Dss Compliance Controls · micsapp bundle

    PCI DSS 4.0.1 establishes 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data. With PCI DSS 3.2.1 retiring April 2024 and 51 new requirements
    3 repo stars
42. ▌
    Implementing Scim Provisioning With Okta · micsapp bundle

    Implement automated user provisioning and deprovisioning using SCIM 2.0 protocol with Okta as the identity provider.
    3 repo stars
43. ▌
    Implementing Stix Taxii Feed Integration · micsapp bundle

    STIX (Structured Threat Information eXpression) and TAXII (Trusted Automated eXchange of Intelligence Information) are OASIS open standards for representing and transporting cyber threat intelligence.
    3 repo stars
44. ▌
    Implementing Taxii Server With Opentaxii · micsapp bundle

    Deploy and configure an OpenTAXII server to share and consume STIX-formatted cyber threat intelligence using the TAXII 2.1 protocol for automated indicator exchange between organizations.
    3 repo stars
45. ▌
    Implementing Zero Trust Dns With Nextdns · micsapp bundle

    Implement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking, privacy protection, and organizational policy enforcement across all endpoints.
    3 repo stars
46. ▌
    Performing Bluetooth Security Assessment · micsapp bundle

    Assess Bluetooth Low Energy device security by scanning, enumerating GATT services, and detecting vulnerabilities
    3 repo stars
47. ▌
    Performing Cloud Forensics Investigation · micsapp bundle

    Conduct forensic investigations in cloud environments by collecting and analyzing logs, snapshots, and metadata from AWS, Azure, and GCP services.
    3 repo stars
48. ▌
    Performing Dynamic Analysis With Any Run · micsapp bundle

    Performs interactive dynamic malware analysis using the ANY.RUN cloud sandbox to observe real-time execution behavior, interact with malware prompts, and capture process trees, network traffic, and system changes. Activates for requests involving interactive sandbox analysis, cloud-based malware detonation, real-time behavioral observation, or ANY.RUN usage.
    3 repo stars
49. ▌
    Performing Initial Access With Evilginx3 · micsapp bundle

    Perform authorized initial access using EvilGinx3 adversary-in-the-middle phishing framework to capture session tokens and bypass multi-factor authentication during red team engagements.
    3 repo stars
50. ▌
    Performing Lateral Movement With Wmiexec · micsapp bundle

    Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.
    3 repo stars
51. ▌
    Performing Log Source Onboarding In Siem · micsapp bundle

    Perform structured log source onboarding into SIEM platforms by configuring collectors, parsers, normalization, and validation for complete security visibility.
    3 repo stars
52. ▌
    Performing Physical Intrusion Assessment · micsapp bundle

    Conduct authorized physical penetration testing using tailgating, badge cloning, lock bypassing, and rogue device deployment to evaluate facility security controls.
    3 repo stars
53. ▌
    Performing Privilege Escalation On Linux · micsapp bundle

    Linux privilege escalation involves elevating from a low-privilege user account to root access on a compromised system. Red teams exploit misconfigurations, vulnerable services, kernel exploits, and w
    3 repo stars
54. ▌
    Performing Scada Hmi Security Assessment · micsapp bundle

    Perform security assessments of SCADA Human-Machine Interface (HMI) systems to identify vulnerabilities in web-based HMIs, thin-client configurations, authentication mechanisms, and communication channels between HMI and PLCs, aligned with IEC 62443 and NIST SP 800-82 guidelines.
    3 repo stars
55. ▌
    Securing Remote Access To Ot Environment · micsapp bundle

    This skill covers implementing secure remote access to OT/ICS environments for operators, engineers, and vendors while preventing unauthorized access that could compromise industrial operations. It addresses jump server architecture, multi-factor authentication, session recording, privileged access management, vendor remote access controls, and compliance with IEC 62443 and NERC CIP-005 remote access requirements.
    3 repo stars
56. ▌
    Analyzing Security Logs With Splunk · micsapp bundle

    Leverages Splunk Enterprise Security and SPL (Search Processing Language) to investigate security incidents through log correlation, timeline reconstruction, and anomaly detection. Covers Windows event logs, firewall logs, proxy logs, and authentication data analysis. Activates for requests involving Splunk investigation, SPL queries, SIEM log analysis, security event correlation, or log-based incident investigation.
    3 repo stars
57. ▌
    Analyzing Threat Intelligence Feeds · micsapp bundle

    Analyzes structured and unstructured threat intelligence feeds to extract actionable indicators, adversary tactics, and campaign context. Use when ingesting commercial or open-source CTI feeds, evaluating feed quality, normalizing data into STIX 2.1 format, or enriching existing IOCs with campaign attribution. Activates for requests involving ThreatConnect, Recorded Future, Mandiant Advantage, MISP, AlienVault OTX, or automated feed aggregation pipelines.
    3 repo stars
58. ▌
    Analyzing Windows Amcache Artifacts · micsapp bundle

    Parse and analyze Windows Amcache.hve registry hive to extract program execution evidence, file metadata, SHA-1 hashes, and device connection history for digital forensics and incident response investigations.
    3 repo stars
59. ▌
    Building Detection Rules With Sigma · micsapp bundle

    Builds vendor-agnostic detection rules using the Sigma rule format for threat detection across SIEM platforms including Splunk, Elastic, and Microsoft Sentinel. Use when creating portable detection logic from threat intelligence, mapping rules to MITRE ATT&CK techniques, or converting community Sigma rules into platform-specific queries using sigmac or pySigma backends.
    3 repo stars
60. ▌
    Building Incident Response Playbook · micsapp bundle

    Designs and documents structured incident response playbooks that define step-by-step procedures for specific incident types aligned with NIST SP 800-61r3 and SANS PICERL frameworks. Covers playbook structure, decision trees, escalation criteria, RACI matrices, and integration with SOAR platforms. Activates for requests involving IR playbook creation, incident response procedure documentation, response runbook development, or SOAR playbook design.
    3 repo stars
61. ▌
    Collecting Indicators Of Compromise · micsapp bundle

    Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security incidents to enable detection, blocking, and threat intelligence sharing. Covers network, host, email, and behavioral indicators using STIX/TAXII formats and threat intelligence platforms. Activates for requests involving IOC collection, indicator extraction, threat indicator sharing, compromise indicators, STIX export, or IOC enrichment.
    3 repo stars
62. ▌
    Collecting Open Source Intelligence · micsapp bundle

    Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and attack campaigns using publicly available data sources, passive reconnaissance tools, and dark web monitoring. Use when investigating external threat actor infrastructure, performing pre-engagement reconnaissance for authorized red team assessments, or enriching CTI reports with publicly available adversary context. Activates for requests involving Maltego, Shodan, OSINT framework, SpiderFoot, or infrastructure reconnaissance.
    3 repo stars
63. ▌
    Conducting Network Penetration Test · micsapp bundle

    Conducts comprehensive network penetration tests against authorized target environments by performing host discovery, port scanning, service enumeration, vulnerability identification, and controlled exploitation to assess the security posture of network infrastructure. The tester follows PTES methodology from reconnaissance through post-exploitation and reporting. Activates for requests involving network pentest, infrastructure security assessment, internal network testing, or external perimeter testing.
    3 repo stars
64. ▌
    Configuring Ldap Security Hardening · micsapp bundle

    Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding, and channel binding bypass. Covers LDAPS enforcement, channel binding, LDAP si
    3 repo stars
65. ▌
    Detecting Business Email Compromise · micsapp bundle

    Business Email Compromise (BEC) is a sophisticated fraud scheme where attackers impersonate executives, vendors, or trusted partners to trick employees into transferring funds, sharing sensitive data,
    3 repo stars
66. ▌
    Detecting Container Escape Attempts · micsapp bundle

    Container escape is a critical attack technique where an adversary breaks out of container isolation to access the host system or other containers. Detection involves monitoring for escape indicators
    3 repo stars
67. ▌
    Detecting Modbus Protocol Anomalies · micsapp bundle

    This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems. It addresses function code monitoring, register range validation, timing analysis, unauthorized client detection, and deep packet inspection for malformed Modbus frames. The skill leverages Zeek with Modbus protocol analyzers, Suricata IDS with OT rules, and custom Python-based detection using Markov chain models for normal Modbus transaction sequences.
    3 repo stars
68. ▌
    Exploiting Deeplink Vulnerabilities · micsapp bundle

    Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applications to identify unauthorized access, data injection, intent hijacking, and redirect manipulation. Use when assessing mobile app attack surface through custom URI schemes, Android App Links, iOS Universal Links, or intent-based navigation. Activates for requests involving deep link security testing, URL scheme exploitation, mobile intent abuse, or link hijacking.
    3 repo stars
69. ▌
    Exploiting Insecure Deserialization · micsapp bundle

    Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications to achieve remote code execution during authorized penetration tests.
    3 repo stars
70. ▌
    Hunting Advanced Persistent Threats · micsapp bundle

    Proactively hunts for Advanced Persistent Threat (APT) activity within enterprise environments using hypothesis-driven searches across endpoint telemetry, network logs, and memory artifacts. Use when conducting scheduled threat hunting cycles, investigating anomalous behavior flagged by UEBA, or validating that known APT TTPs are not present in the environment. Activates for requests involving MITRE ATT&CK, Velociraptor, osquery, Zeek, or threat hunting playbooks.
    3 repo stars
71. ▌
    Hunting Credential Stuffing Attacks · micsapp bundle

    Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins. Uses statistical analysis on Splunk or raw log data. Use when investigating account takeover campaigns or building detection rules for auth abuse.
    3 repo stars
72. ▌
    Hunting For Dns Tunneling With Zeek · micsapp bundle

    Detect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.
    3 repo stars
73. ▌
    Hunting For Supply Chain Compromise · micsapp bundle

    Hunt for supply chain compromise indicators including trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts.
    3 repo stars
74. ▌
    Implementing Bgp Security With Rpki · micsapp bundle

    Implement BGP route origin validation using RPKI with Route Origin Authorizations, RPKI-to-Router protocol, and ROV policies on Cisco and Juniper routers to prevent route hijacking.
    3 repo stars
75. ▌
    Implementing Diamond Model Analysis · micsapp bundle

    The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features - Adversary, Capability, Infrastructure, and Victim. This skill covers implementing the Diamond Model programmatically to classify and correlate intrusion events, build activity threads, and generate pivot-ready intelligence.
    3 repo stars
76. ▌
    Implementing GCP Vpc Firewall Rules · micsapp bundle

    Implementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egress traffic, apply hierarchical firewall policies across the organization, and monitor firewall rule effectiveness using VPC Flow Logs.
    3 repo stars
77. ▌
    Implementing Network Access Control · micsapp bundle

    Implements 802.1X port-based network access control using RADIUS authentication, PacketFence NAC, and switch configurations to enforce identity-based access policies, posture assessment, and automatic VLAN assignment for authorized devices.
    3 repo stars
78. ▌
    Performing API Fuzzing With Restler · micsapp bundle

    Uses Microsoft RESTler to perform stateful REST API fuzzing by automatically generating and executing test sequences that exercise API endpoints, discover producer-consumer dependencies between requests, and find security and reliability bugs. The tester compiles an OpenAPI specification into a RESTler fuzzing grammar, configures authentication, runs test/fuzz-lean/fuzz modes, and analyzes results for 500 errors, authentication bypasses, resource leaks, and payload injection vulnerabilities. Activates for requests involving API fuzzing, RESTler testing, stateful API testing, or automated API security scanning.
    3 repo stars
79. ▌
    Performing API Rate Limiting Bypass · micsapp bundle

    Tests API rate limiting implementations for bypass vulnerabilities by manipulating request headers, IP addresses, HTTP methods, API versions, and encoding schemes to circumvent request throttling controls. The tester identifies rate limit headers, determines enforcement mechanisms, and attempts bypasses including X-Forwarded-For spoofing, parameter pollution, case variation, and endpoint path manipulation. Maps to OWASP API4:2023 Unrestricted Resource Consumption. Activates for requests involving rate limit bypass, API throttling evasion, brute force protection testing, or API abuse prevention assessment.
    3 repo stars
80. ▌
    Performing Clickjacking Attack Test · micsapp bundle

    Testing web applications for clickjacking vulnerabilities by assessing frame embedding controls and crafting proof-of-concept overlay attacks during authorized security assessments.
    3 repo stars
81. ▌
    Performing Fuzzing With Aflplusplus · micsapp bundle

    Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instruments target binaries with afl-cc/afl-clang-fast, manages input corpora with afl-cmin and afl-tmin, runs parallel fuzzing campaigns with afl-fuzz, and triages crashes using CASR or GDB scripts. Activates for requests involving binary fuzzing, crash discovery, coverage-guided testing, or AFL++ fuzzing campaigns.
    3 repo stars
82. ▌
    Performing Malware Triage With Yara · micsapp bundle

    Performs rapid malware triage and classification using YARA rules to match file patterns, strings, byte sequences, and structural characteristics against known malware families and suspicious indicators. Covers rule writing, scanning, and integration with analysis pipelines. Activates for requests involving YARA rule creation, malware classification, pattern matching, sample triage, or signature-based detection.
    3 repo stars
83. ▌
    Scanning Infrastructure With Nessus · micsapp bundle

    Tenable Nessus is the industry-leading vulnerability scanner used to identify security weaknesses across network infrastructure including servers, workstations, network devices, and operating systems.
    3 repo stars
84. ▌
    Scanning Network With Nmap Advanced · micsapp bundle

    Performs advanced network reconnaissance using Nmap's scripting engine, timing controls, evasion techniques, and output parsing to discover hosts, enumerate services, detect vulnerabilities, and fingerprint operating systems across authorized target networks.
    3 repo stars
85. ▌
    Securing AWS Lambda Execution Roles · micsapp bundle

    Securing AWS Lambda execution roles by implementing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, using IAM Access Analyzer to validate permissions, and enforcing role scoping through SCPs.
    3 repo stars
86. ▌
    Testing For Sensitive Data Exposure · micsapp bundle

    Identifying sensitive data exposure vulnerabilities including API key leakage, PII in responses, insecure storage, and unprotected data transmission during security assessments.
    3 repo stars
87. ▌
    Testing Oauth2 Implementation Flaws · micsapp bundle

    Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token leakage, scope escalation, and PKCE bypass. The tester evaluates the authorization server, client application, and token handling for common misconfigurations that enable account takeover or unauthorized access. Activates for requests involving OAuth security testing, OIDC vulnerability assessment, OAuth2 redirect bypass, or authorization code flow testing.
    3 repo stars
88. ▌
    Mission Orchestrator · micsapp bundle

    Unified lifecycle orchestrator for attune project development. Auto-detects project state, selects mission type, routes through phases via Skill() delegation, and manages session recovery. Wraps brainstorm-specify-plan-execute into a single mission lifecycle.
    3 repo stars
89. ▌
    MCP Code Execution · micsapp bundle

    Use this skill BEFORE building complex tool chains. Optimize proactively. location: plugin token_budget: 200. Use when >3 tools chained sequentially, large datasets (>10k rows), large files (>50KB), context usage >25%. Do not use when simple tool calls that do not chain. DO NOT use when: context pressure is low and tools are fast.
    3 repo stars
90. ▌
    Token Conservation · micsapp

    Use this skill at the START of every session. This is MANDATORY for quota management. location: plugin token_budget: 300. Use when session starts (mandatory), prompt sizes spike, tool calls increase, before long-running analyses or massive context loads. Do not use when context-optimization already handles the scenario. DO NOT use when: simple queries with minimal context.
    3 repo stars
91. ▌
    Uninstall Watchdog · micsapp

    Remove the egregore watchdog daemon and clean up all associated files (plist/unit, pidfile, watchdog log).
    3 repo stars
92. ▌
    Markdown Formatting · micsapp bundle

    Canonical markdown formatting conventions for diff-friendly documentation. Consult this skill when generating, editing, or reviewing markdown prose. Defines hybrid line wrapping, heading style, list spacing, and link conventions.
    3 repo stars
93. ▌
    Progressive Loading · micsapp bundle

    Context-aware progressive module loading with hub-and-spoke pattern for token optimization. progressive loading, lazy loading, hub-spoke, module selection.
    3 repo stars
94. ▌
    Risk Classification · micsapp bundle

    Inline risk classification for agent tasks using a 4-tier model. Hybrid routing: GREEN/YELLOW use heuristic file-pattern matching, RED/CRITICAL escalate to war-room-checkpoint for full reversibility scoring.
    3 repo stars
95. ▌
    Python Testing · micsapp bundle

    Consult this skill for Python testing implementation and patterns. Use when writing unit tests, setting up test suites, implementing TDD, configuring pytest, creating fixtures, async testing, writing integration tests, mocking dependencies, parameterizing tests, setting up CI/CD testing. Do not use when evaluating test quality - use pensive:test-review instead. DO NOT use when: infrastructure test config - use leyline:pytest-config.
    3 repo stars
96. ▌
    Architecture Review · micsapp bundle

    Use this skill for architecture assessment and compliance. Use when reviewing architecture decisions, auditing ADR compliance, analyzing coupling, validating design principles. Do not use when selecting architecture paradigms - use archetypes skills. DO NOT use when: API surface review - use api-review.
    3 repo stars
97. ▌
    Team Assemble · micsapp bundle

    Analyze tasks and dynamically assemble expert agent teams using Claude Code's TeamCreate API. Scouts your codebase, designs optimal agents, and executes with validation.
    3 repo stars
98. ▌
    React Context Setup · micsapp

    Configure react context setup operations. Auto-activating skill for Frontend Development. Triggers on: react context setup, react context setup Part of the Frontend Development skill category. Use when working with react context setup functionality. Trigger with phrases like "react context setup", "react setup", "react".
    3 repo stars
99. ▌
    Go Handler Generator · micsapp

    Generate go handler generator operations. Auto-activating skill for Backend Development. Triggers on: go handler generator, go handler generator Part of the Backend Development skill category. Use when working with go handler generator functionality. Trigger with phrases like "go handler generator", "go generator", "go".
    3 repo stars
100. ▌
     Prisma Schema Helper · micsapp

     Configure with prisma schema helper operations. Auto-activating skill for Backend Development. Triggers on: prisma schema helper, prisma schema helper Part of the Backend Development skill category. Use when working with prisma schema helper functionality. Trigger with phrases like "prisma schema helper", "prisma helper", "prisma".
     3 repo stars