All authors
Claude Skills by Manoj-11-Dahal
github.com/Manoj-11-Dahal15,860 skills0 installs0 views
- Security Secret Exposure Response And RevocationUse when a task involves responding safely when a credential or key may have appeared in code, logs, or a report to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approva...Votes: 0GitHub stars: 2
- Security Service Account Owner And Expiry AuditUse when a task involves identifying service accounts without a clear owner, purpose, or review date to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...Votes: 0GitHub stars: 2
- Security Ssdf Practice Evidence MapUse when a task involves mapping secure-development claims to current NIST SSDF practice evidence to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active...Votes: 0GitHub stars: 2
- Security Synthetic Identity Test Account PlanUse when a task involves creating test identities that safely exercise authorized security controls to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before acti...Votes: 0GitHub stars: 2
- Security Target Ownership VerificationUse when a task involves confirming that a security test target belongs to the consenting organization to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before a...Votes: 0GitHub stars: 2
- Security Target Resolution Drift GuardUse when a task involves preventing an approved hostname from resolving to an unapproved target during a test to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval b...Votes: 0GitHub stars: 2
- Security Test Artifact Cleanup VerificationUse when a task involves confirming that temporary test artifacts and access are removed after an assessment to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...Votes: 0GitHub stars: 2
- Security Test Backout And Service Recovery PlanUse when a task involves preparing a recoverable test plan before a security change or stateful check to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ac...Votes: 0GitHub stars: 2
- Security Test Credential Lifecycle ReviewUse when a task involves controlling credentials issued for a security assessment to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active testing, contai...Votes: 0GitHub stars: 2
- Security Test Observability Owner NoticeUse when a task involves aligning authorized security testing with monitoring and operations teams to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before activ...Votes: 0GitHub stars: 2
- Security Test Tool Provenance And Version ReviewUse when a task involves reviewing the source, version, permissions, and side effects of a security tool before use to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appr...Votes: 0GitHub stars: 2
- Security Test Window And Change Freeze CoordinationUse when a task involves coordinating authorized security testing with service changes and business events to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befo...Votes: 0GitHub stars: 2
- Security Third Party Incident Intake ReviewUse when a task involves handling a security incident notification from a cloud, software, or service provider to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval ...Votes: 0GitHub stars: 2
- Security Third Party Service Dependency MapUse when a task involves mapping vendor-owned dependencies that can receive assessment traffic or evidence to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befo...Votes: 0GitHub stars: 2
- Security Third Party Test Consent ReviewUse when a task involves checking permissions when an in-scope service depends on a hosting, SaaS, CDN, or identity provider to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain expl...Votes: 0GitHub stars: 2
- Security Threat Model Change Trigger ReviewUse when a task involves deciding whether an architecture or operational change requires threat-model updates to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval b...Votes: 0GitHub stars: 2
- Security Tls Certificate Expiry ReadinessUse when a task involves planning certificate renewal before an authorized service certificate expires to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before a...Votes: 0GitHub stars: 2
- Security Tls Configuration Versioned AssessmentUse when a task involves reviewing a service's TLS settings against a versioned policy or approved baseline to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval bef...Votes: 0GitHub stars: 2
- Vulnerability Authenticated Scan Evidence CheckUse when a task involves assessing whether an authorized scan had the identity and permissions needed to see relevant configuration to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obta...Votes: 0GitHub stars: 2
- Vulnerability Compensating Control Evidence ReviewUse when a task involves assessing whether a compensating control meaningfully reduces an unpatched vulnerability's risk to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit...Votes: 0GitHub stars: 2
- Vulnerability Cpe Applicability ValidationUse when a task involves interpreting NVD product configuration statements against a real deployment to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...Votes: 0GitHub stars: 2
- Vulnerability Cve Record Status ValidationUse when a task involves checking whether a CVE record is reserved, published, rejected, or disputed before use to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval...Votes: 0GitHub stars: 2
- Vulnerability Cvss Severity Context ReviewUse when a task involves interpreting a CVSS score without confusing severity with local risk to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active tes...Votes: 0GitHub stars: 2
- Vulnerability Dependency Reachability AssessmentUse when a task involves determining whether a vulnerable software dependency is present and reachable in a product to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appr...Votes: 0GitHub stars: 2
- Vulnerability Duplicate Finding ClusteringUse when a task involves grouping repeated vulnerability findings without hiding distinct affected assets to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befor...Votes: 0GitHub stars: 2
- Vulnerability End Of Life Component DecisionUse when a task involves choosing a supported response when an affected component no longer receives security updates to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit ap...Votes: 0GitHub stars: 2
- Vulnerability Epss Signal Limit ReviewUse when a task involves using an exploit-prediction score as one bounded input to vulnerability triage to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ...Votes: 0GitHub stars: 2
- Vulnerability Exploitation Signal TriangulationUse when a task involves evaluating whether available evidence supports active exploitation of a vulnerability to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval ...Votes: 0GitHub stars: 2
- Vulnerability Exposure And Asset Criticality RankingUse when a task involves prioritizing findings using the affected asset's exposure and business role to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...Votes: 0GitHub stars: 2
- Vulnerability False Positive Evidence StandardUse when a task involves deciding whether evidence is sufficient to mark a scanner finding as not applicable to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...Votes: 0GitHub stars: 2
- Vulnerability Firmware Applicability ReviewUse when a task involves checking whether a firmware advisory matches an installed hardware and firmware revision to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approv...Votes: 0GitHub stars: 2
- Vulnerability Kev Prioritization CheckUse when a task involves checking the current CISA Known Exploited Vulnerabilities catalog during remediation triage to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit app...Votes: 0GitHub stars: 2
- Vulnerability Patch Validation In StagingUse when a task involves verifying a proposed security update in a representative non-production environment to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...Votes: 0GitHub stars: 2
- Vulnerability Product Version ApplicabilityUse when a task involves determining whether an advisory applies to the exact product and version in an asset inventory to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit ...Votes: 0GitHub stars: 2
- Vulnerability Public Report Intake TriageUse when a task involves handling a vulnerability report from an external researcher through an authorized intake channel to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explici...Votes: 0GitHub stars: 2
- Vulnerability Remediation Priority QueueUse when a task involves building a reviewable order for a security backlog with changing exposure and threat evidence to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit a...Votes: 0GitHub stars: 2
- Vulnerability Remediation Retest Closure EvidenceUse when a task involves verifying that an approved vulnerability remediation is complete before closing its record to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appr...Votes: 0GitHub stars: 2
- Vulnerability Risk Exception Expiry GovernanceUse when a task involves reviewing an approved vulnerability exception before its expiry or renewal to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before acti...Votes: 0GitHub stars: 2
- Vulnerability Sbom Enrichment Quality ReviewUse when a task involves checking component identity and provenance before attaching vulnerability data to an SBOM to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appro...Votes: 0GitHub stars: 2
- Vulnerability Scanner Coverage ReconciliationUse when a task involves checking which assets and protocols a vulnerability scan did and did not cover to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ...Votes: 0GitHub stars: 2
- Vulnerability Severity Normalization Across ToolsUse when a task involves reconciling different scanner severity labels into one transparent triage view to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ...Votes: 0GitHub stars: 2
- Vulnerability Transitive Dependency Impact TriageUse when a task involves understanding how a transitive package finding affects the owning application to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before a...Votes: 0GitHub stars: 2
- Vulnerability Vendor Advisory CrosscheckUse when a task involves corroborating a vulnerability record against the affected vendor's primary advisory to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...Votes: 0GitHub stars: 2
- Vulnerability Workaround Expiry And Patch TransitionUse when a task involves managing a temporary workaround until a vendor fix is available and validated to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before a...Votes: 0GitHub stars: 2
- Aas Game Subtitle Timing Approval Evidence PacketUse when a game subtitle timing and localization result is ready for a human owner to approve, reject, or redirect to produce a decision packet for the subtitle timing review sheet containing options, evidence, risks, and open questions. Success means the decision owner, requested decision, source evidence, alternatives, uncertainty, and consequence of no action are all visible; spoken events map to readable captions without obscuring essential play cues. Use configured search, fetch, read, b...Votes: 0GitHub stars: 2
- Aas Game Subtitle Timing Change Impact TraceUse when a version, rule, source, or stakeholder change may affect game subtitle timing and localization to produce a before/after change record and impact map for the subtitle timing review sheet. Success means each material difference is tied to affected dependencies, consumers, owners, and a test or explicitly unknown impact; spoken events map to readable captions without obscuring essential play cues. Use configured search, fetch, read, browser, test, and write capabilities only when rele...Votes: 0GitHub stars: 2
- Aas Game Subtitle Timing Closeout Handoff LedgerUse when a game subtitle timing and localization work item is nearing completion, pause, or transfer to another owner to produce a closeout ledger for the subtitle timing review sheet with status, evidence, owner, and retention state. Success means all deliverables, unresolved items, approvals, and next owners are recorded, and the stop reason is explicit; spoken events map to readable captions without obscuring essential play cues. Use configured search, fetch, read, browser, test, and write...Votes: 0GitHub stars: 2
- Aas Game Subtitle Timing Completeness ReconciliationUse when the game subtitle timing and localization workflow receives records that must agree across sources, periods, or statuses to produce a reconciliation worksheet for the subtitle timing review sheet with matched, unmatched, and unresolved rows. Success means counts and key fields reconcile or every variance is quantified, sourced, and left unresolved for an owner; spoken events map to readable captions without obscuring essential play cues. Use configured search, fetch, read, browser, t...Votes: 0GitHub stars: 2
- Aas Game Subtitle Timing Exception Triage QueueUse when the game subtitle timing and localization workflow has exceptions, missing evidence, or competing priorities to produce a prioritized exception queue for the subtitle timing review sheet with evidence, owner, and next action. Success means every exception has a severity rationale, source, owner or explicit unassigned state, and a bounded next step; spoken events map to readable captions without obscuring essential play cues. Use configured search, fetch, read, browser, test, and writ...Votes: 0GitHub stars: 2
- Aas Game Subtitle Timing Recovery Readiness DrillUse when the game subtitle timing and localization workflow needs a safe recovery, rollback, replay, or continuity check to produce a recovery-drill record for the subtitle timing review sheet with starting state, test, and observed outcome. Success means the dry-run or approved non-production drill meets the predeclared recovery target and leaves the baseline intact; spoken events map to readable captions without obscuring essential play cues. Use configured search, fetch, read, browser, tes...Votes: 0GitHub stars: 2