briiirussell builds agent skills for security work, with the most popular covering digital forensics on disk images, memory captures and deleted-file recovery, structured threat modeling using STRIDE and attack trees, and open source intelligence gathering. The rest of the catalogue extends into application and infrastructure testing, including web and mobile audits against OWASP standards and container and Kubernetes configuration review, along with security operations work such as SIEM detection rule engineering and SOC runbook design. Taken together, the skills cover the investigation, assessment and monitoring sides of security practice.
Cybersecurity Skills
29 skills · 506 stars · MIT
Ai Risk Management Apply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems…
Api Audit Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023).
Breach Patterns Learn from public breach disclosures — extract the audit question each one implies and check your…
Cloud Audit Audit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and se…
Container Audit Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive pr…
Crypto Audit Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handlin…
Csf Mapping Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect…
Dependency Audit Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs,…
Disk Forensics Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic…
Finding Triage Triage a single security finding — from a scanner, audit, advisory, or report — to a defensible d…
Hipaa Audit Audit applications and infrastructure handling Protected Health Information against HIPAA — Secur…
Iam Audit Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure),…
Incident Triage Guide rapid triage and initial response to security incidents following NIST SP 800-61 methodology.
Mobile Audit Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak cr…
Osint Recon Gather and correlate open source intelligence from public sources for authorized investigations,…
Owasp Audit Audit application source code against the OWASP Top 10 (2021) vulnerability categories — broken a…
Pci Audit Audit applications and infrastructure handling payment card data against PCI DSS v4.0.
Privacy Engineering Implement and audit privacy controls in product and infrastructure — GDPR, CCPA / CPRA, LGPD, PIP…
Prompt Injection Audit applications for AI prompt injection, agent security, and LLM permission boundary vulnerabi…
Recon Perform structured reconnaissance and attack surface enumeration for authorized penetration tests…
Red Team Engagement Plan, scope, and execute an authorized red-team engagement — distinct from a penetration test.
Secrets Audit Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit…
Security Comms Translate technical security work into the language of non-security audiences — board, executives…
Siem Detection Engineer and audit SIEM detection rules — log source coverage, Sigma / KQL / SPL / Elastic query…
Soc Operations Build, run, and improve a Security Operations Center — alert prioritization, runbook authoring, e…
Threat Hunting Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who…
Threat Modeling Run a structured threat-modeling session for a new feature, system, or architecture — STRIDE, att…
Vuln Research Research a specific CVE or vulnerability disclosure end-to-end — what version is affected, is you…
Web Pentest Perform black-box / grey-box web application penetration testing on an authorized target — auth b…