All authors
Claude Skills by jeremylongshore
github.com/jeremylongshore5,187 skills76 installs8,596 views
- Generating Executive SummaryCompose an exec-readable summary from a unified findings JSONL plus the OWASP coverage report. Computes a single engagement risk score (0-100, severity-weighted with OWASP-breadth and governance terms), rolls up findings into headline counts, names the top-3 remediation priorities with effort + impact estimates, and produces a 1-2 page markdown document for a C-level or board audience. Elides technical detail; the vulnerability report is the deep document. Use when: closing an engagement, pre...Votes: 0GitHub stars: 2,719
- Mapping Findings To Owasp Top10Annotate every pentest finding with its OWASP Top 10 (2021) category by applying a deterministic rule table keyed on source skill, finding category, detail keywords, and CWE identifier when present. Produces an enriched findings JSONL plus a per-category rollup report showing how findings distribute across A01 through A10. Required for customer-facing OWASP coverage sections and compliance contexts (PCI DSS 6.5, SOC2 CC7, ISO 27001 A.14.2). Use when: enriching findings after cluster 1-4 scans...Votes: 0GitHub stars: 2,719
- Probing Dangerous Http MethodsProbe a target for HTTP methods that should not be enabled in production — TRACE (XST attack), unrestricted PUT/DELETE, DEBUG/CONNECT, WebDAV (PROPFIND/MKCOL/COPY/MOVE), and Allow header enumeration. Use when: penetration test rules of engagement include HTTP method testing, OR a load balancer change went live and you suspect default methods were exposed. Threshold: TRACE returns 200 on any path (XST), PUT/DELETE returns anything other than 405/403/404 on a non-API endpoint, OPTIONS Allow hea...Votes: 0GitHub stars: 2,719
- Recording Pentest EngagementPackage an engagement's findings, scan outputs, evidence, and signed ROE into a timestamped archive with a SHA-256 manifest covering every file. Establishes chain of custody so legal counsel, internal audit, or an outside SOC can verify the archive hasn't been modified after closeout. Optionally signs the manifest with GPG for cryptographic attestation. Use when: closing an engagement, snapshotting evidence after each scan day, before handing artifacts to customer, or after an emergency-stop ...Votes: 0GitHub stars: 2,719
- Scanning For Hardcoded SecretsScan a source-code tree for hardcoded credentials embedded in source files: AWS access keys, GitHub tokens, Stripe keys, Slack tokens, Anthropic API keys, OpenAI keys, JWT signing secrets, generic base64-encoded passwords, RSA / SSH private keys, and high-entropy string literals that pattern-match common credential shapes. Use when: pre-commit gate before pushing a feature branch, audit before SOC2, post-incident scan after a leak, or inheriting a codebase you didn't write. Threshold: any sou...Votes: 0GitHub stars: 2,719
- Tracing Transitive VulnerabilitiesBuild a dependency-tree map of a project (npm or Python) and trace the path from each known-vulnerable transitive package back to one or more direct dependencies. Identifies which direct-dep bump would clear the most findings at once (highest-leverage upgrade), which vulnerabilities are unreachable through any version bump and require overrides or vendor-patch, and which CVEs sit at deep transitive depth (3+ levels from a direct dep) where blast-radius triage is hardest. Use when: a multi-fin...Votes: 0GitHub stars: 2,719
- Bash Script Helper'Configure with bash script helper operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Branch Naming Helper'Configure with branch naming helper operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Changelog Creator'Create changelog creator operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Commit Message Formatter'Manage commit message formatter operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Docker Compose Creator'Create docker compose creator operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Docker Container Basics'Manage docker container basics operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Dockerfile Generator'Generate dockerfile generator operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Dotenv Manager'Manage dotenv manager operations. Auto-activating skill for DevOps Basics.Votes: 0GitHub stars: 2,719
- Environment Variables Handler'Manage environment variables handler operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Git Workflow Manager'Manage git workflow manager operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Github Actions Starter'Manage github actions starter operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Gitignore Generator'Generate gitignore generator operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Gitlab Ci Basics'Manage gitlab ci basics operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Jenkins Pipeline Intro'Manage jenkins pipeline intro operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Json Config Manager'Manage json config manager operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Linux Commands Guide'Manage linux commands guide operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Makefile Generator'Generate makefile generator operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Npm Scripts Optimizer'Optimize npm scripts optimizer operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Package Json Manager'Manage package json manager operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Pre Commit Hook Setup'Configure pre commit hook setup operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Readme Generator'Generate readme generator operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Release Notes Generator'Generate release notes generator operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Ssh Key Manager'Manage ssh key manager operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Yaml Config Validator'Validate yaml config validator operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Alertmanager Rules Config'Manage alertmanager rules config operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Ansible Playbook Generator'Generate ansible playbook generator operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Ansible Role Creator'Create ansible role creator operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Argocd App Deployer'Deploy argocd app deployer operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Cert Manager Setup'Manage cert manager setup operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Consul Service Discovery'Manage consul service discovery operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Elasticsearch Index Manager'Manage elasticsearch index manager operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Envoy Proxy Config'Configure envoy proxy config operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Fluentd Config Generator'Generate fluentd config generator operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Flux Gitops Setup'Configure flux gitops setup operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Grafana Dashboard Creator'Create grafana dashboard creator operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Helm Chart Generator'Generate helm chart generator operations. Auto-activating skill forVotes: 0GitHub stars: 2,719
- Helm Values Manager'Manage helm values manager operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719
- Istio Service Mesh Config'Configure istio service mesh config operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Kubernetes Configmap Handler'Configure kubernetes configmap handler operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Kubernetes Deployment Creator'Create kubernetes deployment creator operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Kubernetes Ingress Config'Configure kubernetes ingress config operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Kubernetes Secrets Manager'Manage kubernetes secrets manager operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Kubernetes Service Manager'Manage kubernetes service manager operations. Auto-activating skillVotes: 0GitHub stars: 2,719
- Nginx Ingress Manager'Manage nginx ingress manager operations. Auto-activating skill for DevOpsVotes: 0GitHub stars: 2,719