Security

Expert skill for Datadog Observability & Security Platform

Detects early-stage ransomware indicators in network traffic before encryption begins, including initial access broker activity, command-and-control…

Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google Cloud Functions) through event source…

Audit and rewrite prose to remove AI writing patterns, with detect-only and edit-in-place modes.

Docker and Docker Compose patterns for local development, hardened CLI installer harnesses, container security, networking, volumes, and multi-service…

Use when doing ANY task involving Supabase.

Discovering and accessing unprotected pages, APIs, and administrative interfaces by enumerating URLs and bypassing authentication controls during authorized…

Configures Fail2ban with custom filters and actions to detect port scanning activity, SSH brute force attempts, and network reconnaissance, automatically…

Use for SQL injection attacks and database exploitation.

Solve CTF Web Exploitation challenges by triaging HTTP behavior, source code, sessions, auth, injection, SSRF, file upload, template, deserialization, race…

Skill for reviewing Pull Requests from any GitHub repository using GitHub CLI (gh).

Run Google Lighthouse against a URL (mobile and desktop), trace the performance, accessibility, SEO, and best-practices findings to the project's actual…

Run a read-only, evidence-based audit of an LLM or agent application for prompt injection and the failures that make injection matter.

Exploit cloud environments (AWS, Azure, GCP) - misconfigured S3, IAM, metadata APIs

Exploit and extract data from databases (SQL injection, NoSQL injection, data exfiltration)

Escalate from user to root on Linux (SUID, capabilities, sudo, kernel exploits)

Hack Android/iOS apps (reverse engineering, API interception, bypass root detection)

Intercept, analyze, and manipulate network traffic (MITM, ARP spoofing, SSL stripping)

Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized…

Check what is actually live (store listing and labels, published policies, deployed backend, retention jobs) against the code and published words, then work…

Configure and troubleshoot the Hermes Gateway HTTP API server — enabling port 8642, setting API_SERVER_KEY, and connecting external tools (Studio, dashboards…

Audit and rewrite content to remove AI writing patterns ("AI-isms").

This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems including man-in-the-middle attacks on industrial…

Mod APKs for Android 16/ColorOS with APKTool 3.0.3+.