Policy as code
Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure. Use when enforcing compliance through automation.
Skills for your AI
Security skills for your AI
Prompt injection defense
Defend AI systems against prompt injection and indirect prompt attacks using input controls, tool permissions, output validation, and isolation boundaries.
Recon scope triage
Triage ASM/recon output for ownership before testing
Redteam mindset
Red-team operator discipline
Redteam report template
Client-facing red-team deliverable format
Report writing
Bug bounty report writing for H1/Bugcrowd/Intigriti/Immunefi
Runbook creation
Create operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.
Sast scanning
Perform static application security testing with tools like Semgrep, CodeQL, and SonarQube.
Sbom supply chain
Generate, sign, and verify SBOMs and provenance attestations to secure the software supply chain. Use when implementing SLSA controls, artifact trust policies, or compliance evidence for releases.
Security arsenal
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table.
Security automation
Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.
Soc2 compliance
Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.
Sops encryption
Encrypt files and configs with Mozilla SOPS.
Ssl tls management
Manage SSL/TLS certificates with Let's Encrypt and internal PKI. Configure secure HTTPS, certificate renewal, and cipher suites. Use when implementing secure communications.
Supply chain attack recon
External recon for software supply-chain attack surface
Supply chain attack response
Detect, respond to, and prevent software supply chain attacks on package registries, container images, and CI/CD pipelines with lockfile auditing, provenance verification
Threat modeling
Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when designing secure systems or assessing application security.
Triage validation
Finding validation before writing any report
Vendor management
Implement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.
Vmware vcenter attack
VMware vSphere / vCenter Server external attack matrix
Vpn setup
Configure WireGuard, OpenVPN, and cloud VPNs. Implement secure remote access and site-to-site connectivity. Use when setting up secure network tunnels.
Vulnerability scanning
Scan systems and dependencies for CVEs and security vulnerabilities.
Waf setup
Deploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection. Use when protecting web applications from common attacks.
Web2 recon
This skill is for educational purposes or authorized security assessments only.