nowsecure
NowSecure integration. Manage data, records, and automate workflows. Use when the user wants to interact with NowSecure data.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,242 results
performing-false-positive-reduction-in-siem
Reduces SIEM false positives through systematic rule tuning, threshold adjustment, correlation logic refinement, allowlisting, and threat intelligence…
performing-physical-intrusion-assessment
Conduct authorized physical penetration testing against facilities, server rooms, and restricted areas using tailgating, RFID badge cloning, lock bypassing,…
performing-soc-tabletop-exercise
Performs tabletop exercises for SOC teams simulating security incidents through discussion-based scenarios to test incident response procedures, communication…
ai-privacy-inference
Managing privacy risks from AI-driven inferences about individuals including derived data classification, profiling under GDPR Art. 22, inference accuracy…
ai-training-lawfulness
Assesses lawful basis for AI training data processing per EDPB April 2025 report on LLMs and general-purpose AI. Covers legitimate interest balancing tests,…
ai-vendor-privacy-due
Determines controller-processor relationships for AI services and conducts privacy due diligence. Covers SaaS AI (processor), embedded AI (joint controller),…
apac-transfers
Guides management of cross-border data transfers under Asia-Pacific regulatory frameworks including APEC CBPR, ASEAN Model Contractual Clauses, Japan APPI…
australia-privacy-act
Guides compliance with Australia's Privacy Act 1988 including the 2024 reform amendments. Covers automated decision-making transparency, children's privacy…
dotenvx
MUST USE for any task involving the dotenvx CLI tool — encrypting .env files, running commands with injected env vars, managing secrets across environments,…
authentication-failures
Use this skill whenever you need to audit, test, or fix Authentication Failures (OWASP A07:2025) in Python web applications — especially FastAPI and Flask.…
account-recovery-identity-review
Design and audit account recovery, password reset, MFA reset, passkey recovery, SSO fallback, device change, email/phone change, account ownership proof,…
keycloak-admin
Keycloak administration including realm management, client configuration, OAuth 2.0 setup, user management with custom attributes, role and group management,…
session-bash-audit
Use when asked to audit, measure, or re-check how agent sessions are using the Bash tool — command chaining (&&, ;, |), cd into the session's own repo,…
recognizing-deception
Recognize defensive deception during an engagement — honeypots, honeytokens and canary tokens, decoy AD accounts and shares, canary files, and deceptive cloud…
reversing-flutter-apps
Reverse engineer and intercept traffic from Flutter/Dart mobile apps using blutter, reFlutter, and Frida. Use when an APK or IPA contains libflutter.so,…
uipath-governance
UiPath governance via `uip gov` — author, deploy, and diagnose policies on three layers. AOps product policies (`uip gov aops-policy`): block/restrict/enforce…
macos-intune-baseline
Guidance for hardening macOS endpoints managed by Microsoft Intune — automated device enrollment via Apple Business Manager (ABM), platform single sign-on…
sentinel-detection-engineering
Guidance for detection engineering in Microsoft Sentinel — building, testing, deploying, and maintaining analytics rules, hunting queries, and SOAR automation.…
windows-11-security-baseline
Guidance for the Windows 11 enterprise security baseline — Microsoft's recommended security settings deployed via Intune (Settings catalog / security…
semgrep
Run Semgrep static analysis across a codebase, optionally using Semgrep Pro for cross-file taint analysis. Use when Semgrep or a static-analysis scan is…
ctf-ai-ml
CTF AI/ML attack techniques. Use when challenges involve AI model attacks, adversarial example generation, model extraction, prompt injection/jailbreaking, LoRA weight manipulation, LLM token smuggling, membership inference attacks, training data poisoning, neural network analysis. Covers FGSM/PGD/C&W adversarial attacks, model inversion, model weight perturbation recovery, LLM toolchain hijacking, context window manipulation, and other AI...
impacket-toolkit
Impacket Windows protocol toolkit. Use when remote operations are needed through Windows protocols such as SMB/Kerberos/WMI/DCOM/MSSQL. It covers secretsdump credential extraction, psexec/wmiexec remote execution, Kerberos attacks, NTLM relay, and is a domain penetration and Windows...
nmap-scan
Use nmap for port scanning and service identification. Use when fine-grained port scanning, service version detection, operating system fingerprinting, or NSE script vulnerability scanning is needed for a target. nmap is the most classic network scanner, supporting multiple scan modes such as SYN/TCP/UDP/ACK, with 600+ built-in NSE...