Security

Evidence-driven penetration and attack-surface engineering for web applications, APIs, networks, identity systems, Active Directory, cloud, containers…

Open-source intelligence (OSINT) collection, passive reconnaissance, attack-surface mapping, phishing campaign analysis, credential exposure auditing, and…

Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics.

Bria.ai image API — generate from text prompts, edit with natural language, remove backgrounds for transparent PNGs, and create product lifestyle shots.

This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations.

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource…

Detects prompt injection attacks targeting LLM-based applications using a multi-layered defense combining regex pattern matching for known attack signatures…

Security audit and vulnerability scanner for AI agent skills before installation.

Security middleware for all XMTP communications in EverClaw.

火山引擎 Supabase .

Identify duplicate company records by domain and name, export audit CSVs for review, and guide merging.

License/卡密/activation verification-flow recovery and implementation.

Identify and suppress globally unsubscribed contacts to ensure legal compliance and reduce billing.

Identify and suppress hard-bounced contacts to protect email sender reputation.

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

Build a systematic threat hunt hypothesis framework that transforms threat intelligence, attack patterns, and environmental data into testable hunting…

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build…

Audits and progressively hardens Xcode security build settings for a Capacitor iOS app (ios/App/App.xcodeproj, scheme App) and native plugin code…

Vulnerability analysis: OWASP top 10, security audit, attack surface, code security.

Secure key management for AI agents.

Cross-reference and synthesise daily memory files into patterns, insights, and carry-forward items.

Advanced prompt injection defense system for EverClaw with HiveFence network integration.

Security scanner for AgentSkill packages.

Validates all CI skills in this repo.