code42
Code42 integration. Manage data, records, and automate workflows. Use when the user wants to interact with Code42 data.
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-20 00:13
Security & auditing
7,236 results
privacera
Privacera integration. Manage data, records, and automate workflows. Use when the user wants to interact with Privacera data.
security-expert
Security specialist perspective for the weekly review. Focuses on XSS/CSRF, authorization boundaries, input validation, secrets handling, and dependency CVEs.
hunting-for-dcsync-attacks
Detect DCSync attacks (MITRE ATT&CK T1003.006) by analyzing Windows Event ID 4662 (AccessMask 0x100) for DS-Replication-Get-Changes and…
hunting-for-ntlm-relay-attacks
Detects NTLM relay attacks (MITRE T1557.001) by analyzing Windows Event ID 4624 logon type 3 with NTLMSSP authentication, flagging IP-to-hostname mismatches,…
performing-active-directory-forest-trust-attack
Enumerate and audit Active Directory forest trust relationships using Impacket for SID filtering analysis, trust key extraction, cross-forest SID history abuse…
performing-iot-security-assessment
Performs comprehensive security assessments of IoT devices and their ecosystems by testing hardware interfaces, firmware, network communications, cloud APIs,…
ai-model-privacy-audit
Conducts privacy auditing of AI models including training data extraction testing, membership inference attacks, model inversion testing, and attribute…
audit-sampling-methods
Guides privacy audit sampling methodology including statistical and non-statistical sampling, sample size determination, stratification techniques, attribute…
conducting-gdpr-dpia
Guides the end-to-end GDPR Data Protection Impact Assessment process under Article 35, including mandatory trigger identification per Art. 35(3), DPIA content…
differential-review
Perform security-focused review of code diffs and pull requests, identifying newly introduced vulnerabilities, security regressions, and unsafe patterns in…
verify-fix
Use only when the user explicitly requests verification that a security fix remediates a reported vulnerability. Do not invoke automatically while implementing…
ikb42603-cloud-security-labs
AWS cloud computing security essentials lab exercises covering IAM, encryption, network security, and monitoring
auditing-security
Perform a systematic security audit of a codebase, checking for OWASP Top 10 vulnerabilities, secrets exposure, and insecure patterns.
security-bluebook-builder
Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules,…
microsoft-azure-webjobs-extensions-authentication-events-dotnet
Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions.
odoo-security-rules
Expert in Odoo access control: ir.model.access.csv, record rules (ir.rule), groups, and multi-company security patterns.
bypassing-root-jailbreak-detection
Defeat root, jailbreak, emulator, debugger, and Frida detection in mobile apps using Magisk DenyList, Zygisk modules, objection, and targeted Frida hooks, and…
reporting-security-findings
Write security findings and assessment reports — severity scoring with CVSS and business impact, reproducible proof of concept, remediation guidance, executive…
insecure-defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing…
ffuf-fuzz
Complete reference for the ffuf fuzzing tool. Used for directory/file discovery, parameter fuzzing, virtual host enumeration, POST data fuzzing, and multi-position fuzzing. Use when you need path brute-forcing, parameter discovery, or subdomain enumeration for a web application. More flexible than gobuster/dirsearch—supports multiple FUZZ positions and custom filtering. Any need for Web...
persist-maintain
Permission persistence methodology. Use when long-term access needs to be maintained after obtaining permissions on the target system. Covers Linux (cron/SSH key/webshell) and Windows (scheduled tasks/services/registry/WMI) persistence techniques, as well as web-level webshell deployment and concealment strategies
subdomain-deep
Deep subdomain mining, multi-source joint enumeration. Use when you need to maximize subdomain discovery coverage, conventional DNS enumeration results are insufficient, or the target uses a CDN/wildcard DNS. Jointly discover through three methods: DNS brute-forcing, OSINT engines, and crawlers, cross-discovering
bkend-auth
bkend.ai authentication — email/social login, JWT tokens, RBAC, session management. Triggers: bkend auth, bkend login, bkend signup, bkend JWT, bkend RBAC