Skills for your AI
Produces vulnerability management plans, patch and remediation strategies, reports, tracking setups, disclosure drafts, research source lists, framework explanations, automation plans, and trend analyses for cybersecurity analysts. Use when planning scans, sco
Compares web frameworks across performance, security, community, licensing, documentation and other dimensions to support stack decisions. Use when the user asks to compare frameworks, evaluate benchmarks, security, ecosystem, learning curve, database compatib
Provides actionable web security guidance on secure coding, authentication, encryption, network configuration, deployment, compliance, and incident response. Use when a developer asks about passwords, MFA, input validation, SSL/TLS, security headers, key manag
Designs, implements, optimizes and hardens scalable WebSocket systems for real-time bidirectional communication. Use when building or tuning WebSocket servers and clients, choosing realtime protocols, scaling to many concurrent connections, or fixing latency,
Audits WebSocket endpoints for CSWSH, missing per-message auth, tampering, socket.io authorization bypass, upgrade smuggling, and library versions. Use when testing real-time features like chat, dashboards, or trading platforms, or when reviewing WebSocket han
Reviews code, dependencies, and configuration for security vulnerabilities and recommends prioritized fixes. Use when the user asks for a security review, vulnerability analysis, secure fix recommendations, validation of a security fix, dependency or supply-ch
Sets up a WhatsApp channel for a NanoClaw-style assistant using the Baileys adapter, covering number safety checks, adapter install and registration, build validation, QR or pairing-code authentication, and personal chat number collection. Use when the user wa
Automates safe Windows Server, Active Directory, DNS, DHCP, and Group Policy changes with pre-flight validation, -WhatIf previews, and rollback documentation. Use when planning or executing AD object migrations, DNS/DHCP audits and cleanup, GPO linking or secu
Analyzes wireless network performance, coverage, interference, QoS, security, roaming, device compatibility, firmware, channels, and monitoring to produce administrator-ready optimization plans. Use when a network admin asks about Wi-Fi congestion, signal stre
Analyzes wireless network data, logs, and configurations to recommend fixes for interference, channels, access points, roaming, bandwidth, QoS, security, capacity, and performance. Use when an engineer reports wireless issues or asks for optimization, planning
Maps XML attack surfaces and tests XXE vulnerabilities in authorized web application engagements, covering inline file read, blind OOB detection, exfiltration, SSRF pivots, file upload vectors, content-type swaps, local DTD repurposing, shared infrastructure m
Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.
Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.
Secure AI coding agents (Claude Code, Cursor, Codex, Copilot) with permission boundaries, secret protection, code review gates, and safe sandbox configurations for team environments.
Run structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.
Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.
End-to-end Android APK red-team pipeline
Maintain IT asset inventory and configuration management database. Track hardware, software, and cloud resources. Use when managing IT assets.
Implement centralized audit logging and SIEM integration. Configure log retention and security monitoring. Use when implementing audit trail requirements.
Configure AWS CloudTrail for audit logging. Set up organization trails and event analysis. Use when auditing AWS activity.
Store and rotate secrets in AWS Secrets Manager.
Manage secrets and certificates in Azure Key Vault. Configure access policies, integrate with Azure services, and implement secure secret management. Use when managing secrets in Azure environments.
Configure Azure Monitor and Activity Log for auditing. Set up diagnostic settings and log analytics. Use when auditing Azure activity.
Use at the START of any bug bounty hunting session, when switching targets, or when feeling lost about what to do next.
