securityskills is an author whose skills equip AI agents for security and compliance work, including cloud security reviews of AWS environments for IAM privilege escalation and misconfigurations, incident response forensics covering evidence preservation and timeline construction, and malware triage through static analysis and sandbox execution. Their catalog also reaches into web security testing for SSRF, automated bug bounty reconnaissance pipelines, and GDPR data mapping, with a notable focus on governing AI coding agents through approval gates, credential scoping, and audit-ready change evidence.
Skills
21 skills
Active Directory Attack Paths Enumerate and exploit common Active Directory misconfigurations such as Kerberoasting, AS-REP roa…
Agentic Sdlc Controls Review a development pipeline where AI coding agents write, commit and deploy — permission bounda…
Ai Change Evidence Turn changes authored by AI coding agents into evidence an auditor accepts — provenance, authoriz…
Attack Surface Recon Map an organization's external attack surface — domains, subdomains, exposed services, leaked cre…
Aws Security Review Audit AWS environments for IAM privilege escalation, exposed resources, logging gaps, and misconf…
Bug Bounty Recon Pipeline Build an automated, continuously-running reconnaissance pipeline for bug bounty programs — subdom…
Bug Bounty Report Writing Write bug bounty reports that get triaged quickly and rated accurately — clear impact statements,…
Container Image Hardening Harden Dockerfiles and container images — multi-stage builds, non-root users, minimal base images…
Gdpr Data Mapping Build a GDPR-compliant data inventory — record of processing activities, lawful basis mapping, da…
Incident Response Forensics Perform digital forensics during incident response — evidence preservation, volatile data collect…
Jwt Security Review Audit JSON Web Token implementations for algorithm confusion, weak secrets, missing validation, a…
Kubernetes Security Audit Audit Kubernetes clusters for RBAC excesses, pod security gaps, network policy holes, and supply-…
Malware Triage Safely triage unknown malware samples — static indicators, sandbox execution, behavior extraction…
Network Segmentation Review Review network segmentation designs and verify enforcement — VLANs, firewalls, cloud security gro…
Owasp Top10 Analysis Systematically review a web application against the OWASP Top 10 vulnerability classes with concr…
Pci Dss Scoping Scope a PCI DSS environment correctly — cardholder data flows, segmentation validation, and requi…
Pentest Engagement Methodology Execute an authorized penetration test end-to-end, from scoping and rules of engagement through r…
Secure Code Review Perform a security-focused code review — map trust boundaries, audit input paths and auth flows,…
Soc2 Readiness Prepare an organization for a SOC 2 Type I or II audit — trust services criteria mapping, evidenc…
Ssrf Hunting Find and exploit Server-Side Request Forgery across URL-fetching features, including cloud metada…
Stride Threat Modeling Run a STRIDE-based threat modeling workshop — diagram the system, enumerate threats per element,…