Information Security Analysts

Reconnaissance Knowledge

Comprehensive knowledge about network reconnaissance and service enumeration. Provides methodologies for port scanning, service fingerprinting, web directory discovery, and vulnerability identification. Includes best practices for structured data collection.

CharlesKozel0

Exploitation Knowledge

Comprehensive knowledge about vulnerability exploitation and initial access. Provides expertise on finding and adapting exploits, adapting proof-of-concepts, gaining shells, and capturing user flags. Covers reverse shells, file uploads, SQL injection, and RCE vulnerabilities.

CharlesKozel0

Backend

Mapquest Key Security

Best practices for securing MapQuest API keys. Covers environment variables, referrer restrictions, server-side proxying, key rotation, and incident response when a key is exposed.

definingAvi0

System Administration

Pentest Coordinator

Autonomous penetration testing coordinator using ReAct methodology. Automatically activates when user provides a target IP or asks to start penetration testing. Orchestrates reconnaissance, exploitation, and privilege escalation until both user and root flags are captured. (project)

CharlesKozel0

System Administration

Quem Pode O Qu Quempodeoque

Mapa completo de permissões, papéis, isolamento de dados e segurança do CoreStudio. Consulte antes de implementar qualquer feature que envolva quem vê o quê.

gabriela92dias-web0

Machine Learning

Gsd Secure Phase

Retroactively verify threat mitigations for a completed phase

gabriel555740

Security

Preamble (run first)

Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gate) and comprehensive (monthly deep scan, 2/10 bar). Trend tracking across audit runs. Use when: "security audit", "threat model", "pentest review", "OWASP", "CSO review".

gaaschk0

Machine Learning

Adversarial Reasoning

Structured adversarial reasoning with cross-model critique. Enumerates candidates, extracts assumptions, classifies failures, constructs the strongest valid path, then shells out to independent AI models for Stage 6 attack — breaking circular confirmation between builder and critic.

cryptskii0

Documents

Osint Daily Digest

OSINT 每日情报摘要。扫描全部关注人物和行业资讯的近期动态，分为人物动态和行业资讯两部分，通过 LLM 生成结构化每日简报，输出字幕翻译风格的精美 HTML。触发词：「今日情报」「每日摘要」「今天有什么新动态」「daily digest」「情报简报」「每日速递」输出：~/Desktop/osint-reports/每日情报_{日期}.html，自动打开浏览器

g-1864427330

Sales & Marketing

Spec Driven Policy

This skill should be used when the user asks to "create a policy spec", "write a spec", "spec-first policy", "docs/specs/rego", "SPEC.md", "policy specification", "spec template", or mentions creating specification documents for OPA policies before writing Rego. Provides the spec-driven policy development workflow with benchmark research and approval gates.

Database Tools

Rego V1 Migration

This skill should be used when the user asks to "migrate rego", "rego v1", "v0 to v1", "upgrade rego", "opa fmt --rego-v1", "rego breaking changes", "rego compatibility", mentions Rego version migration, or encounters v0 syntax errors in OPA 1.0+. Provides Rego v0 to v1 migration patterns and tooling.

Opa Toolchain

This skill should be used when the user asks about "opa cli", "opa eval", "opa build", "opa check", "opa fmt", "regal lint", "opa bundle", "opa bench", "opa run", or mentions OPA tooling, CI/CD pipeline integration for OPA, or Rego linting. Provides OPA CLI and ecosystem tooling reference.

System Administration

Policy Platforms

This skill should be used when the user asks about "kubernetes policy", "gatekeeper", "constraint template", "terraform policy", "conftest", "terraform compliance", "docker policy", "dockerfile policy", "envoy authz", "envoy authorization", "service mesh policy", "cloud policy", "aws policy rego", "azure policy rego", "gcp policy rego", or mentions writing OPA policies for a specific platform. Provides platform-specific Rego patterns and input schemas.

Recovering Passwords From Timing Measurements

Recover fixed-length secrets from noisy early-exit comparison timings by prefix-wise aggregation and robust ranking. Use when a dataset contains `(attempt, time)` pairs and longer correct prefixes produce higher latency.

Analyzing Bluekeep Rdp Event Logs

Correlate RDP event logs with BlueKeep IOC and normal-pattern references to produce precise `findings.txt` outputs. Use when tasks require counting targeted vulnerable hosts, identifying true attack sources, and inferring exploit success from mixed benign/malicious telemetry.

Detecting Active Directory Golden Ticket From Artifacts

Determine whether a golden ticket attack occurred by correlating Kerberos ticket anomalies, domain policy, and auth event patterns, then emit a strict 3-line verdict file. Use when investigating AD compromise artifacts in terminal tasks with format-validated output.

Analyzing Email Headers For Phishing

Analyze `.eml` headers to classify phishing vs legitimate messages and generate a schema-compliant JSON report. Use when investigating a mailbox corpus for phishing indicators under terminal-bench style output constraints.

Code Quality

Hardening Rich Text Xss Sanitization

Implement defense-in-depth HTML sanitization for rich text while preserving safe formatting. Use when a CMS/editor must block XSS vectors (script tags, event handlers, dangerous URLs, obfuscation) and pass security/performance tests.

Code Quality

Git Github Security Review

OWASP-based security analysis for code changes

FutureAtoms0

Security

1. Scope

Ultaura-specific security review for backend changes. Grounded in OWASP Top 10, SOC 2 controls, and HIPAA considerations. Produces risk-rated findings (Critical/High/Medium/Low). Use this skill when: - Reviewing new or modified API routes - Reviewing database migrations or RLS policy changes - Reviewing auth changes or permission modifications - Any backend change during the delegation workflow Does NOT cover: Safety system integrity (AI classifier, heuristics, keyword scanning, verification gate) — that is governed separately by the non-negotiable principles in CLAUDE.md.

CryptracSolutions0

Skill Vetting

Security skill — examines 3rd party SKILL.md files for malicious intent

CsabaConsulting0

Security

Security Review

Use this skill when you need to conduct code reviews focusing on security vulnerabilities, injection risks, authentication/authorization issues, and best practices. Also catches correctness errors, performance problems, and maintainability issues.

csmcdermott0

Pd Auditor

Deductive audit using axiom verification, system audit, and via negativa methods. TRIGGER CONDITIONS: (1) Need to audit system or process consistency (2) Verify core assumptions are self-consistent (3) Check component interactions are correct (4) Need to identify design flaws or logical contradictions.

csuzngjh0

Git Workflows

Vault Cleanup

Prepare vault for safe GitHub push by removing or redacting sensitive data. Use this skill before pushing to GitHub, when the user says "cleanup vault", "prepare for github", "safe to push", or wants to check if vault is safe to share. Scans and redacts PII from Needs_Action/, Pending_Approval/, and Logs/ folders.

furqan59110

Internal Recon

Use this skill when the user asks for an environment-wide Viper picture across multiple hosts, sessions, routes, pivot paths, or port forwards; asks what can reach what; or wants current foothold coverage before the next move. Do not use it for single-session inspection, deep analysis, formal reporting, or MSF module planning.

FunnyWolf0