Security

Run a full, read-only HubSpot portal audit covering both the marketing and sales sides: database, deliverability, engagement, owners, pipelines, deal quality…

Mobile competitive-game security research for 和平精英、王者荣耀、PUBG Mobile、Honor of Kings、Game for Peace and similar Android/iOS titles.

Detection engineering research — analyze AV/EDR detection logic, profile signature/heuristic/behavioral/cloud classifiers, develop minimal bypass proofs…

Game runtime analysis and interactive overlay research — process memory structure recovery, entity-component inspection, coordinate projection visualization…

Red-team game-security force-start for ESP/overlay, external/kernel memory read, ACE/anti-cheat surface mapping, IL2CPP/native engine recovery…

Defensive game security and cheat research covering external and internal cheat architecture, trainers, memory tampering, ESP/overlay, aim automation…

Malware analysis and threat intelligence — unpacking, configuration extraction, behavior profiling, C2 protocol decoding, IOC extraction, YARA/Sigma rule…

Evidence-driven penetration and attack-surface engineering for web applications, APIs, networks, identity systems, Active Directory, cloud, containers…

Open-source intelligence (OSINT) collection, passive reconnaissance, attack-surface mapping, phishing campaign analysis, credential exposure auditing, and…

Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics.

Bria.ai image API — generate from text prompts, edit with natural language, remove backgrounds for transparent PNGs, and create product lifestyle shots.

This skill covers deploying Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations.

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource…

Detects prompt injection attacks targeting LLM-based applications using a multi-layered defense combining regex pattern matching for known attack signatures…

Security audit and vulnerability scanner for AI agent skills before installation.

Security middleware for all XMTP communications in EverClaw.

火山引擎 Supabase .

Identify duplicate company records by domain and name, export audit CSVs for review, and guide merging.

License/卡密/activation verification-flow recovery and implementation.

Identify and suppress globally unsubscribed contacts to ensure legal compliance and reduce billing.

Identify and suppress hard-bounced contacts to protect email sender reputation.

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

Build a systematic threat hunt hypothesis framework that transforms threat intelligence, attack patterns, and environmental data into testable hunting…

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build…