Security

Extract GitHub token from VS Code for API in Codespaces.

Use when a user wants an agent to summarise every video in their YouTube Watch Later playlist, publish one secret GitHub gist per summary with gh, and return…

Structured GitHub PR/diff review across correctness, security, tests, and architecture with severity ratings.

Run QA testing on a page, feature, or full site at one of three depth tiers (smoke, standard, full).

Extract and exfiltrate crypto wallet private keys, seed phrases

Bypass any app check at runtime using Frida dynamic hooking.

Audit try/except blocks for overly broad scope, by-catch risk, and catches of built-in exceptions that should be conditional checks.

Crypto wallet cracking, blockchain exploits, contracts.

Persistence, lateral movement, exfiltration, tracks.

Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence…

Pre-deployment security audit of Solidity smart contracts in a Foundry project.

Automates the enrichment of raw indicators of compromise with multi-source threat intelligence context using SOAR platforms, Python pipelines, or TIP…

Builds automated threat intelligence feed integration pipelines connecting STIX/TAXII feeds, open-source threat intel, and commercial TI platforms into SIEM…

Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security…

Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and attack campaigns using publicly available data…

Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, and configuration changes for security violations.

Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks, and offense management to detect multi-stage…

Expert skill for Datadog Observability & Security Platform

Detects early-stage ransomware indicators in network traffic before encryption begins, including initial access broker activity, command-and-control…

Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google Cloud Functions) through event source…

Audit and rewrite prose to remove AI writing patterns, with detect-only and edit-in-place modes.

Docker and Docker Compose patterns for local development, hardened CLI installer harnesses, container security, networking, volumes, and multi-service…

Use when doing ANY task involving Supabase.

Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized…