Skills for your AI
Audits exported Active Directory evidence for privilege escalation paths, delegation risks, and protocol hardening gaps. Use when reviewing BloodHound, PingCastle, ADRecon, or Certipy exports, or raw Get-AD*/dsacls/repadmin output, for posture assessments, Ker
Provides advanced SQL guidance for DBAs on query optimization, indexing, partitioning, joins, CTEs, window functions, stored procedures, transactions, data modeling, performance tuning, security, replication, backups, and dynamic SQL. Use when a DBA asks for s
Generates AI/ML test cases, synthetic data, performance, bias, robustness, explainability, integration, regression, usability, automation, triage, and monitoring outputs for QA testers. Use when testing an AI/ML model or system, auditing bias or fairness, prob
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.
Guides cybersecurity analysts through vulnerability scanning, threat modeling, risk identification, analysis, prioritization, mitigation, monitoring, compliance, business impact, incident response, training, and third-party risk tasks. Use when the analyst nee
Integrates third-party APIs with authentication, error handling, rate limiting, retries, webhooks, pagination, versioning, and security guidance. Use when selecting an API, reviewing API docs, setting up auth, building API clients, handling errors or rate limi
Audits REST APIs for authentication, authorization, injection, compliance, data protection, and hardening gaps. Use when reviewing JWT or session auth, RBAC permissions, input handling, GDPR/HIPAA/PCI DSS compliance, sensitive data exposure, or missing securit
Enumerates and diffs old and current API versions to find security-relevant regressions such as weaker auth, missing rate limits, and lax input validation. Use when auditing versioned API surfaces, comparing specs across versions, or hunting deprecated and int
Atlassian Administrator for managing and organizing Atlassian products (Jira, Confluence, Bitbucket, Trello), users, permissions, security, integrations, system configuration, and org-wide governance. Use when asked to add users to Jira, change Confluence perm
Maps authentication entry points and probes SSO, SAML, OAuth, API, and legacy protocol endpoints for auth bypasses, producing a prioritized vulnerability report. Use when hunting auth bypass bugs, testing SSO/SAML/OAuth flows, probing legacy endpoints like XML
Audits web code and server configuration for security vulnerabilities, browser compatibility, deprecated APIs, and code quality issues, reporting findings with locations, severity, and recommended fixes. Use when asked for a security audit, compatibility check
Guides bug bounty hunters through recon, pre-hunt learning, vulnerability hunting, AI/LLM testing, bug chaining, bypasses, source audit, and validated report writing. Use when planning recon on a new target, hunting a specific vulnerability class, escalating a
Prepares Bugcrowd vulnerability submissions with VRT category selection, severity overrides, OOS rebuttals, chained-finding cross-references, and QA-vs-prod target advice. Use when filing a Bugcrowd report, picking a VRT node, requesting a severity override, r
Hunts business logic vulnerabilities in web applications, focusing on financial-impact cases like price tampering, coupon abuse, and verification bypasses. Use when starting an authorized hunt on a target, mapping auth boundaries, testing verification or rate-
Hunts cache poisoning and web cache deception vulnerabilities in CDN-fronted web applications by mapping cache infrastructure, finding unkeyed headers, testing reflection and cache storage, and measuring blast radius. Use when testing an authorized target for
Terse "caveman" replies: strip filler, articles, hedging; fragments and short synonyms OK; technical terms and code blocks unchanged. Levels: lite (tight sentences), full (classic caveman), ultra (max abbreviation), plus wenyan-lite, wenyan-full, wenyan-ultra
Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when building security progra
/cs:ciso-review <plan> — Risk-paranoid interrogation of any plan that touches data, compliance, or production access. Use when launching features that handle customer data, before a SOC 2 / ISO audit, or after any incident or near-miss.
Verifies clickjacking vulnerabilities by screening frame-protection headers, proving iframe rendering, and confirming cross-site sensitive actions. Use when testing authorized web targets for clickjacking, checking X-Frame-Options or CSP frame-ancestors, or bu
Produces climate impact studies, risk and vulnerability assessments, mitigation and adaptation plans, policy comparisons, and GHG inventories from user-supplied climate data. Use when asked to analyze climate trends, model emission scenarios, assess climate ri
Guides clinical data managers in planning and drafting safeguards for sensitive clinical data, including encryption, access control, masking, audit trails, secure storage and transfer, breach response, audits, training, compliance, backup, vendor assessment, a
Guides cloud integration planning from infrastructure assessment through migration, security, backup, testing, training, cost management, documentation, data integration, and cloud-native development. Use when planning a cloud migration, comparing providers, d
Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, or IaC security gaps. Covers AWS, Azure, and GCP posture assessment with MITRE ATT&CK mapping.
Advises cybersecurity analysts on cloud security audits, configurations, compliance, and incident readiness across AWS, Azure, and GCP. Use when the analyst asks about cloud encryption, access control, monitoring, incident response, compliance, secure configur
