b2-least-privilege-keys
Review B2 application keys, design least-privilege replacements, and retire risky keys without exposing durable secrets.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-25 00:14
Security & auditing
7,421 results
understanding-tauri-ecosystem-security
Guides developers through Tauri ecosystem security practices including security auditing, dependency management, vulnerability reporting, and organizational…
rls-patterns
Row Level Security patterns for database operations. Use when writing any database query, creating API routes that access data, implementing webhooks that…
security
Security Specialist - Security architecture, code review, threat modeling, penetration testing. [VAD] OWASP Top 10 review, secure coding, threat modeling,…
thinking-threatmodel
Tests ideas, decisions, and strategies across multiple time horizons and threat scenarios. Inspired by Daniel Miessler's WorldThreatModelHarness. [WHAT]…
workspace-cli-usage
Use when running cws commands to manage Chaitin security products: SafeLine WAF (site management, IP blocking, ACL, policy rules, attack logs), X-Ray…
ctf-crypto
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRNG, or mathematical crypto problems…
ctf-pwn
Provides binary exploitation (pwn) techniques for CTF challenges. Use when exploiting buffer overflows, format strings, heap vulnerabilities (House of Orange,…
cyber-physical
Cyber-physical / industrial control system (ICS-SCADA) architecture in general: the Purdue model levels, control loops, IT/OT convergence, OT security (IEC…
threat-model
Write a threat model for a repository, kept in the repo next to the code. Maps what the system protects (assets), who from (actors), where trusted and…
security-review
Run a focused STRIDE-based security review using Bug Hunter-native artifacts. Use whenever the user asks for a full security audit, repository security review,…
auth0-automation
Automate Auth0 tasks via Rube MCP (Composio). Always search tools first for current schemas.
virustotal-automation
Automate Virustotal tasks via Rube MCP (Composio). Always search tools first for current schemas.
supply-chain-hardening
Harden software supply chains across ecosystems (npm/pnpm/bun/yarn/aube, uv/pip, Cargo, GitHub Actions/aqua) by reasoning about what installing or importing a…
cloud penetration testing
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources",…
metasploit framework
This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with…
mobile-security-coder
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns. Use PROACTIVELY for mobile…
security-auditor
MASTER SECURITY: OWASP Top 10, SAST/DAST, PenTest, Auth/JWT Audit, Data Encryption, Incident Response. Use for Code Security, Armor config, and Audits.
vulnerability-scanner
Advanced vulnerability analysis principles.
authentication-flow
Login, signup, password reset, SSO, MFA, and authentication UX patterns.
security-hardening
RBAC configuration, row policies, quotas, network security, audit logging, and access control best practices.
cloud-network-security
Manage Serverless network security (traffic filters): create, update, and delete IP filters and AWS PrivateLink VPC filters. Use when restricting network…
elasticsearch-audit
Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security…
elasticsearch-authn
Authenticate to Elasticsearch using native, file-based, LDAP/AD, SAML, OIDC, Kerberos, JWT, or certificate realms. Use when connecting with credentials,…