threat-modeling
Threat modeling methodologies (STRIDE, PASTA, LINDDUN), attack tree analysis, common attack patterns (OWASP Top 10, CWE), risk assessment frameworks, and…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-21 00:11
Security & auditing
7,265 results
implementing-azure-defender-for-cloud
Enable Microsoft Defender for Cloud (CSPM + CWPP) across VMs, containers, SQL, storage, and Key Vault, using Azure Policy for evaluation, Log Analytics for…
cloud-provider-assessment
Cloud service provider privacy assessment framework. Covers ISO 27018 cloud privacy controls, CSA STAR certification, SOC 2 Type II evaluation, shared…
comparing-pia-methodologies
Compares PIA/DPIA methodologies: CNIL PIA tool, ICO DPIA template, NIST Privacy Framework, and ISO 29134. Provides methodology selection criteria based on…
conducting-linddun-threat-modeling
Complete guide to LINDDUN privacy threat modeling methodology covering seven threat categories: Linking, Identifying, Non-repudiation, Detecting, Data…
consent-withdrawal
Implementation guide for GDPR Article 7(3) consent withdrawal mechanisms. Covers the equal ease requirement ensuring withdrawal is as easy as giving consent,…
gdpr-codes-of-conduct
Guides development of GDPR Article 40-41 codes of conduct for industry sectors including drafting, submission, and monitoring body requirements. Activate when…
gpc-cookie-integration
Integrating Global Privacy Control (GPC) signals with cookie consent platforms. Covers GPC signal detection in browsers, automatic opt-out triggering, mapping…
turkey-kvkk
Implements compliance with Turkey's Personal Data Protection Law (Kisisel Verilerin Korunmasi Kanunu, KVKK, Law No. 6698). Covers data controller obligations,…
hardware-in-the-loop-security-tester
Guides security assessment of embedded and cyber-physical systems on hardware-in-the-loop (HIL) test benches—bench setup, ECU/ECM or PLC targets, bus…
ikb42603-cloud-computing-security-essentials
Educational AWS cloud security labs covering IAM, encryption, network security, monitoring, and incident detection
diffing-binary-patches
Locate the vulnerability a security patch fixes by diffing the pre- and post-patch binaries — using BinDiff, Diaphora, or ghidriff to find the changed…
exploiting-memory-corruption
Develop working exploits from memory-corruption bugs in native binaries — turning a stack/heap overflow, use-after-free, or type confusion into control flow,…
bug-bounty
Master bug bounty orchestrator — full pipeline: recon, pre-hunt learning, vulnerability hunting (30+ classes), A-to-B chaining, AI/LLM testing (ASI01-ASI10),…
subdomain-enumeration
Map subdomains via crt.sh and subfinder at recon kickoff.
vibe-code-auditor
Audit rapidly generated or AI-produced code for structural flaws, fragility, and production risks.
security-automation
Professional skills and methodologies for security automation
security
Security standards for authentication, input validation, and OWASP compliance
lucia-auth
Build production-ready web authentication using Lucia Auth and The Copenhagen Book patterns. Use when users ask to "add auth", "implement authentication",…
grad-disruptive-innovation
Apply Christensen's Disruptive Innovation theory to assess low-end and new-market threats to incumbents. Use this skill when the user needs to evaluate whether…
turtle-harden
Harden code with patient, layered defense. The turtle carries its shell — bone-deep protection grown from within, not strapped on. Use when building new…
security specialist
Application security expert focused on authentication and authorization, data protection, and compliance auditing. Use this Skill when users need to: (1) design a secure login authentication system (2) conduct secure code review (3) check GDPR/privacy compliance (4) defend against common security vulnerabilities (OWASP Top 10).
ai-inventory
Define AI roles, risk levels, and regulatory obligations system by system—determine whether each system is an AI service provider or user, assign a risk tier, and map to the obligation requirements of Chinese AI regulations. Applicable when establishing an AI system inventory, conducting an annual AI audit, or when new regulations require reclassification.
pia-generation
Generate a Personal Information Protection Impact Assessment (PIA) that conforms to the internal format, suitable for new features, products, or processing activities, using the structure learned from seed PIAs. Use when the user says "write a PIA," "personal information protection impact assessment," "do we need to do a PIA for this," "do a privacy review for this feature," or describes a new personal information processing activity.