4,624 skills sorted by stars.
Detect where an organization passes an audit but remains exposed — seven documented compliance theater patterns with spe...
Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR"...
Monitors and tracks employee compliance with mandatory requirements including training completions, certification renewa...
Regulatory compliance intelligence for international trade. Covers PGA requirements (FDA, EPA, USDA, CPSC), denied party...
Map architecture requirements to valid DSDS component categories and component types. Use when converting system require...
Use when working with comprehensive review full review
Generate structured PR descriptions from diffs, add review checklists, risk assessments, and test coverage summaries. Us...
Debate and trading platform for AI agents
Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization,...
Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting KRBTGT,...
<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral mo...
Conduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identify privil...
Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Test...
Conducts comprehensive network penetration tests against authorized target environments by performing host discovery, po...
Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen Kerberos tickets (TGT or TGS) to authenticate to...
Design and execute a social engineering penetration test including phishing, vishing, smishing, and physical pretexting...
Plan and execute authorized vishing (voice phishing) pretext calls to assess employee susceptibility to social engineeri...
Conducts authorized wireless network penetration tests to assess the security of WiFi infrastructure by testing for weak...
Secure secret handoff from human to AI. Use when you need sensitive information from the user (API keys, passwords, toke...
Audit agent configuration for redundancy, conflicts, dead weight, staleness, and instruction drift across CLAUDE.md or A...
Audit and harden your OpenClaw configuration. Checks AGENTS.md, gateway settings, sandbox config, and permission policie...
Explicit-invocation audit of configuration sources, precedence, overrides, defaults, validation, drift, dangerous settin...
Configure Slack channel tokens (bot token + app-level token)
Add Dynamic Application Security Testing (DAST) steps to existing Harness pipelines using Harness STO scanners. Supports...
Set up JWT Bearer authentication with token service and authorization policies
Configure code scanning in Harness pipelines using STO security scanners. Helps identify where to inject SAST/SCA scanni...
Setup Azure Key Vault and Kubernetes secrets
Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory. Cover...
Implement OAuth 2.1 / OIDC authentication using Better Auth with MCP assistance. Use when setting up a centralized auth...
A Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digi...
Hardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and perform cry...
Configures Hardware Security Modules for cryptographic key storage using the PKCS#11 standard interface, covering key ge...
Configures and hardens IP allowlists for CockroachDB Cloud clusters to restrict network access to authorized CIDR ranges...
Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous binding...
Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and Device Au...
TLS 1.3 (RFC 8446) is the latest version of the Transport Layer Security protocol, providing significant improvements ov...
Configures Microsoft Defender for Endpoint (MDE) advanced protection settings including attack surface reduction rules,...
Configures Windows Event Logging with advanced audit policies to generate high-fidelity security events for threat detec...
Use when the user asks to list, search, or inspect ConnectWise Control (ScreenConnect) remote-support and access session...
Secure Docker images and container runtime configurations. Implement non-root users, read-only filesystems, and security...
| ID | sre-container-security |
Audit container security auditor operations. Auto-activating skill for Security Advanced. Triggers on: container securit...
Generate authentic, compelling copy for portfolios. Covers tone calibration, taglines, bios, project descriptions, and a...
Reviews your last 30 posts to find what is worth doubling down on, what is dead weight, and the gaps to fill. Use when t...
Fuzz directories, files, and parameters using ffuf, feroxbuster, arjun, paramspider, and x8. Use when the user has live...
Establish comprehensive understanding of project structure, architecture, dependencies, and current state before conduct...