Skills tagged “security”

Automated pull request reviews for security, logic, and style consistency across multiple languages.

Real-time security audit skill scanning for OWASP Top 10 vulnerabilities and infrastructure misconfigurations.

Comprehensive techniques for identifying and exploiting privilege escalation paths on Linux systems, enabling elevation to root access.

Expert in Istio, Linkerd, and cloud-native networking, specializing in traffic management, security, observability, and multi-cluster mesh configurations.

Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments, enabling hands-on security testing.

Implement Kubernetes security policies for production-grade security, including NetworkPolicy, PodSecurityPolicy, and RBAC.

Derive actionable security requirements from threat models and business context for user stories, test cases, and compliance.

A comprehensive checklist for planning, executing, and following up on penetration tests, ensuring thorough preparation and effective remediation.

Orchestrates Antigravity skills into guided workflows for various scenarios like SaaS MVP delivery, security audits, and AI agent builds.

Test for directory traversal vulnerabilities to read arbitrary files on the server, potentially including sensitive configuration files and credentials.

Analyzes code changes to identify bugs, security vulnerabilities, and code quality issues, providing detailed reports with fix suggestions.

Expert in handling file uploads, cloud storage (S3, R2), presigned URLs, and image optimization. Securely manages large files.

Expert in embedded systems and IoT security, specializing in firmware analysis, reverse engineering, and vulnerability research for various devices.

Analyze frontend code for XSS vulnerabilities, providing detailed reports, fix recommendations, and prevention checklists for React, Vue, Angular, and vanilla JavaScript.

Expert in secure frontend coding practices, specializing in XSS prevention, output sanitization, and client-side security patterns.

Create production-ready GitHub Actions workflows for automated testing, building, and deploying applications.

Comprehensive skill for detecting, exploiting, and remediating Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

Orchestrates multi-agent incident response using SRE practices for rapid resolution, learning, and prevention of future incidents.

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls for comprehensive security.

Assess software systems for compliance with GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards, providing audits and implementation guidance.

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification. Triggers: "Key V...

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, assess risks, and recom...