Skills for your AI
Explains, compares, configures, troubleshoots, recommends, and evaluates network security protocols such as IPsec, SSL/TLS, SSH, VPNs, firewalls, and IDS. Use when a network engineer asks about protocol purpose, setup steps, connectivity problems, protocol sel
Diagnoses and resolves network issues across connectivity, security, VLAN, device, protocol, performance, backup, and documentation domains with structured analysis and approval-gated recommendations. Use when an engineer reports slow performance, DNS or VPN f
Guides help desk technicians through step-by-step network troubleshooting, from physical checks and IP verification to DNS, firewall, traffic analysis, driver updates, configuration and security audits. Use when a user reports connectivity problems, DNS errors
Hunts Next.js and React SSR vulnerabilities in authorized targets, covering fingerprinting, Server Actions abuse, middleware auth bypass, image optimization SSRF, data leakage and IDOR, ISR cache poisoning, debug endpoint and source map exposure, and environme
Probes authorized Node.js and Express targets for prototype pollution, SSTI, command injection, trust proxy misconfiguration, and environment variable exposure. Use when the user asks to security-test a Node.js app, confirm Express fingerprinting, chain protot
Guides authorized OAuth 2.0 penetration testing through a structured attack checklist covering flow mapping, redirect_uri validation, CSRF, PKCE, token leakage, scope escalation, client secret exposure, and code injection. Use when the user wants to assess an
Guides authorized red-team reconnaissance and testing of Okta-as-IdP authentication, covering tenant discovery, user enumeration, auth flow analysis, password spray, MFA factors, OIDC/SAML misconfigurations, and admin API surface. Use when scoping or testing a
Finds, validates, and escalates open redirect vulnerabilities in authorized web targets, chaining them to OAuth token theft, phishing, or SSRF. Use when given crawled URLs and a controlled test domain to hunt redirect parameters, bypass filters, test DOM-based
Guides open source contributors through environment setup, contribution discovery, style and workflow, documentation, pull request review, testing, community engagement, tool building, licensing, analytics, translation, and accessibility or security compliance
Runs a read-only overnight audit of a code repository covering security, performance, accessibility, dependencies, and code quality, then compiles a severity-rated report. Use when the user wants a full codebase audit, a security or dependency review, or a sev
Audits forgot-password and account recovery flows for username enumeration, token exposure, token replay, missing rate limits, weak token predictability, missing session/IP binding, non-expiring tokens, and Referer leaks. Use when testing a password reset endp
Conducts authorized penetration tests through scoping, reconnaissance, exploitation, validation, and reporting. Use when planning an engagement, mapping attack surface, testing vulnerabilities, verifying fixes, running social engineering, password, wireless, o
Audits CI/CD pipeline misconfigurations across GitHub Actions, Jenkins, GitLab CI and Azure DevOps, enumerating configurations, mapping injection and supply chain attack paths, and reporting evidence with countermeasures. Use when reviewing pipeline security,
Drafts, reviews, and updates security policies covering risk assessment, compliance, incident response, access control, data classification, and awareness training. Use when an analyst needs a security policy draft, risk assessment, compliance gap analysis, in
Guides Power BI data model design using star schema, relationship, storage mode, performance, and security best practices from Microsoft documentation. Use when structuring fact and dimension tables, fixing relationship filtering, choosing Import/DirectQuery/C
Reviews and hardens PowerShell scripts, remoting, and Windows endpoint configurations against CIS and DISA STIG baselines, drafting remediation for approval. Use when a script may contain embedded credentials or unsafe calls, when setting up JEA remoting, when
Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.
Manages scientific protocols on protocols.io through its API, covering authentication, protocol and step operations, comments, workspaces, files, and supplementary features. Use when the user asks to search, create, update, publish, or organize protocols, hand
Audits source code for authentication, injection, data exposure, dependency and configuration security issues in strict read-only mode and compiles findings into a markdown report. Use when the user asks for a security review, vulnerability scan, or audit of a
Helps receptionists protect confidential information across documents, calls, visitors, emails, records, passwords, training, and incidents. Use when organizing confidential documents, screening calls, managing visitors, scanning or redacting email, entering r
Use when planning or executing authorized red team engagements, attack path analysis, or offensive security simulations. Covers MITRE ATT&CK kill-chain planning, technique scoring, choke point identification, OPSEC risk assessment, and crown jewel targeting.
Runs server-enforced STRIDE and LINDDUN threat models with live CVE data and EU regulatory grounding. Use when the user asks for a threat model, dependency vulnerability screen, or which EU security obligations (GDPR, NIS2, CRA, AI Act) apply to a system.
Assesses and hardens remote work infrastructure across network security, VPN, cloud collaboration, VDI, endpoints, bandwidth, policy, disaster recovery, and user support, returning findings and recommendations only. Use when analyzing remote access logs, recom
Assesses technology risks, compliance gaps, threats, controls, continuity, vendors, and incident readiness from owner-provided data. Use when a technology manager needs vulnerability prioritization, policy review, threat modeling, control assessment, impact an
