Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 26,878
pages available: 1,120

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 505–528 of 26,878 skills

Oauth2 And Oidc From ScratchAUse when implementing or reviewing OAuth 2.0 / OAuth 2.1 / OpenID Connect from scratch in a real codebase, choosing a flow (authorization code + PKCE, client credentials, BFF), validating ID tokens, storing tokens safely in browsers, sizing refresh-token rotation, or migrating off implicit / ROPC. Triggers: "should I use a JWT or session cookie", PKCE code_challenge/code_verifier, exact redirect_uri match, state vs nonce confusion, ID-token replay, refresh-token rotation, BFF (backend-for-fro...securitypythonrustVotes: 0GitHub stars: 2
GcsAGoogle Cloud Storage service administration and design: storage classes (Rapid, Standard, Nearline, Coldline, Archive), Autoclass, Hierarchical Namespace, lifecycle management, signed URLs, IAM, Pub/Sub notifications, Storage Transfer Service, and cost optimization. Use for \"GCS\", \"Google Cloud Storage\", \"gcloud storage\", \"gsutil\", \"Autoclass\", \"Nearline\", \"Coldline\", \"Archive storage\", \"Rapid storage\", \"signed URL\", \"GCS lifecycle\", \"GCS bucket\", \"HNS bucket\", \"Sto...securitypythongoVotes: 0GitHub stars: 4
Aws S3AAmazon S3 cloud object storage service administration and design: storage classes, lifecycle policies, replication (CRR/SRR/RTC), versioning, Object Lock, encryption, access points, S3 Express One Zone, S3 Tables, Transfer Acceleration, and cost optimization. Use for \"S3\", \"AWS S3\", \"S3 bucket\", \"S3 lifecycle\", \"S3 Glacier\", \"S3 replication\", \"CRR\", \"SRR\", \"S3 Express\", \"S3 storage class\", \"S3 versioning\", \"Object Lock\", \"S3 Transfer Acceleration\", \"S3 access point\...securitygoexpressVotes: 0GitHub stars: 4
ZscalerAExpert agent for Zscaler Zero Trust Exchange. Covers ZIA internet access, ZPA private access, ZDX digital experience monitoring, App Connector deployment, and Zscaler's 150+ data center architecture. WHEN: \"Zscaler\", \"ZIA\", \"ZPA\", \"ZDX\", \"Zscaler Internet Access\", \"Zscaler Private Access\", \"Zscaler Digital Experience\", \"App Connector\", \"Zscaler tunnel\", \"ZCC client\", \"Zscaler policy\".securityrustgoVotes: 0GitHub stars: 4
Zero TrustAExpert routing agent for Zero Trust and SASE. Covers NIST 800-207 zero trust architecture, SASE/SSE components (SWG, CASB, ZTNA, FWaaS), ZTNA vs VPN, identity-centric access, and SD-WAN convergence. WHEN: \"zero trust\", \"SASE\", \"SSE\", \"ZTNA\", \"SWG\", \"CASB\", \"FWaaS\", \"zero trust network access\", \"secure access service edge\", \"NIST 800-207\", \"replace VPN\", \"cloud firewall\". Do NOT use for platform-specific questions -- use the `zscaler`, `netskope`, `prisma-access`, `clou...securityrustgoVotes: 0GitHub stars: 4
ZeekAExpert agent for Zeek network analysis framework. Covers event-driven scripting, structured log analysis (conn.log, dns.log, http.log, ssl.log, files.log), protocol analysis, Intelligence Framework, cluster deployment, Spicy parsers, and Zeek packages. WHEN: \"Zeek\", \"Zeek script\", \"Zeek log\", \"conn.log\", \"zeekctl\", \"Bro\", \"network forensics\", \"Zeek Intelligence Framework\", \"Spicy parser\", \"Zeek cluster\".securitypythonbashVotes: 0GitHub stars: 4
ZapAExpert agent for OWASP ZAP open-source DAST. Covers active/passive scanning, spidering (traditional+AJAX), authentication handling, API scanning (OpenAPI/GraphQL/SOAP), automation framework (YAML), add-ons, headless/Docker mode, and GitHub Actions integration. WHEN: \"OWASP ZAP\", \"ZAP\", \"zaproxy\", \"zap-cli\", \"ZAP automation framework\", \"zap-full-scan\", \"zap-api-scan\", \"zap-baseline-scan\", \"ZAP HUD\", \"zap docker\".securityjavascriptpythonVotes: 0GitHub stars: 4
XsoarAExpert agent for Cortex XSOAR. Provides deep expertise in playbook development (YAML/Python), war room collaboration, indicator management, TIM (Threat Intelligence Management), 900+ integrations, content marketplace, incident lifecycle, and Python scripting for custom automations. WHEN: \"XSOAR\", \"Cortex XSOAR\", \"XSOAR playbook\", \"war room\", \"XSOAR integration\", \"Demisto\", \"XSOAR script\", \"indicator management\", \"TIM\", \"XSOAR content pack\".securitypythonrustVotes: 0GitHub stars: 4
WazuhCExpert agent for Wazuh open-source EDR/SIEM platform. Covers agent deployment, ossec.conf configuration, FIM, SCA, active response, custom rules and decoders, vulnerability detection, compliance (PCI DSS, HIPAA, GDPR), cluster deployment, and Wazuh indexer/dashboard setup. WHEN: \"Wazuh\", \"OSSEC\", \"open-source EDR\", \"FIM\", \"SCA\", \"Wazuh manager\", \"Wazuh agent\", \"ossec.conf\", \"active response\", \"Wazuh indexer\".securityshellbashVotes: 0GitHub stars: 4
Vulnerability ManagementASubdomain routing agent for Vulnerability Management and Attack Surface Management. Covers VM programs, scanner operations, risk scoring (CVSS/EPSS/VPR), remediation workflows, SLA tracking, CNAPP platforms, and EASM tools. WHEN: \"vulnerability management\", \"vuln scan\", \"CVE\", \"CVSS\", \"EPSS\", \"patch prioritization\", \"attack surface\", \"EASM\", \"CNAPP\", \"CSPM\", \"exposure management\". Do NOT use for platform-specific questions -- use the `qualys`, `tenable`, `rapid7`, `snyk`...securitygoawsVotes: 0GitHub stars: 4
VeeamAExpert agent for Veeam Data Platform (VBR v12/v13). Covers backup infrastructure architecture, hardened Linux repositories, immutable backups, SureBackup verification, Secure Restore, 4-eyes authorization, SOBR, and ransomware resilience configuration. WHEN: \"Veeam\", \"VBR\", \"Veeam Backup & Replication\", \"hardened Linux repository\", \"SureBackup\", \"Secure Restore\", \"SOBR\", \"Veeam ONE\", \"Veeam Recovery Orchestrator\", \"4-eyes authorization\".securitygoshellVotes: 0GitHub stars: 4
VantaAExpert agent for Vanta compliance automation. Covers 400+ integrations, 35+ frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR), automated evidence collection, continuous monitoring, trust reports, vendor risk management, AI policy agent, and custom frameworks. WHEN: \"Vanta\", \"Vanta SOC 2\", \"Vanta ISO 27001\", \"Vanta integrations\", \"Vanta trust report\", \"Vanta vendor risk\", \"Vanta AI policy\", \"Vanta custom framework\".securityrustgoVotes: 0GitHub stars: 4
TorqAExpert agent for Torq hyperautomation platform. Provides deep expertise in AI-powered case management, visual workflow builder, integrations marketplace, SOC Copilot, no-code/low-code automation, event-driven triggers, and enterprise-grade security orchestration. WHEN: \"Torq\", \"Torq automation\", \"Torq workflow\", \"hyperautomation\", \"Torq SOC Copilot\", \"Torq integration\", \"Torq playbook\", \"Torq case management\".securityrustgoVotes: 0GitHub stars: 4
TinesAExpert agent for Tines security automation. Provides deep expertise in no-code story building, action types (HTTP, Transform, Trigger, Event), team edition (free tier), credential management, story library, and vendor-agnostic security workflow design. WHEN: \"Tines\", \"Tines story\", \"Tines automation\", \"no-code SOAR\", \"Tines action\", \"Tines trigger\", \"Tines transform\", \"Tines free\", \"Tines team edition\".securityrustgoVotes: 0GitHub stars: 4
ThreatconnectAExpert agent for ThreatConnect TIP and SOAR platform. Covers CAL scoring, ThreatConnect Intelligence feeds, visual playbook automation, case management, indicator management, groups and associations, and STIX/TAXII integration. WHEN: \"ThreatConnect\", \"TC\", \"CAL\", \"Collective Analytics Layer\", \"TCI\", \"ThreatConnect Intelligence\", \"TC playbooks\", \"TC case management\", \"Dataminr\".securitypythonrustVotes: 0GitHub stars: 4
Threat IntelAExpert routing agent for threat intelligence. Covers intelligence lifecycle, strategic/tactical/operational/technical intel, IOCs vs TTPs, STIX/TAXII, TLP 2.0, kill chain, diamond model, and threat actor taxonomy. Routes to Recorded Future, Mandiant, ThreatConnect, and MISP agents. WHEN: \"threat intelligence\", \"threat intel\", \"IOC\", \"TTP\", \"STIX\", \"TAXII\", \"TLP\", \"threat actor\", \"APT\", \"threat feed\", \"intelligence lifecycle\", \"diamond model\". Do NOT use for platform-sp...securityrustgoVotes: 0GitHub stars: 4
TenableAExpert agent for Tenable Nessus, Tenable.io, and Tenable One. Covers scanner deployment, credentialed scan policies, plugin management, compliance auditing, VPR/EPSS prioritization, Nessus Agent configuration, and Tenable One exposure management. WHEN: \"Tenable\", \"Nessus\", \"Tenable.io\", \"Tenable One\", \"VPR\", \"Nessus agent\", \"plugin families\", \"credentialed scan\", \"Tenable SC\", \"exposure management\".securitypythongoVotes: 0GitHub stars: 4
SophosAExpert agent for Sophos Intercept X EDR. Covers deep learning malware detection, CryptoGuard anti-ransomware, exploit prevention, Adaptive Attack Protection, Sophos Central management, Sophos MDR service, and EDR/XDR capabilities. WHEN: \"Sophos\", \"Intercept X\", \"Sophos Central\", \"CryptoGuard\", \"Sophos EDR\", \"Sophos MDR\", \"deep learning detection\", \"Sophos XDR\", \"Sophos MTR\".securityjavascriptpythonVotes: 0GitHub stars: 4
Snyk OssAExpert agent for Snyk Open Source SCA. Covers vulnerability detection, auto-fix PRs, license compliance, reachability analysis, SBOM generation, Snyk CLI, CI/CD integration, and the Snyk platform ecosystem. WHEN: \"Snyk Open Source\", \"Snyk OSS\", \"snyk test\", \"snyk monitor\", \"snyk fix\", \"Snyk auto-fix\", \"Snyk license compliance\", \"Snyk vulnerability database\", \"snyk-to-html\".securityjavascripttypescriptVotes: 0GitHub stars: 4
Snyk CodeAExpert agent for Snyk Code AI-powered SAST. Covers DeepCode engine, real-time IDE scanning, data-flow analysis, auto-fix suggestions, Priority Score, and Snyk platform integration. WHEN: \"Snyk Code\", \"Snyk SAST\", \"DeepCode\", \"Snyk IDE plugin\", \"snyk code test\", \"Snyk Priority Score\", \"Snyk fix\", \"Snyk AppRisk\".securityjavascripttypescriptVotes: 0GitHub stars: 4
Sentinel PlaybooksAExpert agent for Microsoft Sentinel Playbooks (Azure Logic Apps). Provides deep expertise in automation rules, Logic Apps designer, incident/entity triggers, 200+ connectors, managed identity authentication, ARM templates, and cost-effective automation patterns for Sentinel incidents. WHEN: \"Sentinel playbook\", \"Logic Apps security\", \"automation rule\", \"Sentinel automation\", \"incident trigger\", \"entity trigger\", \"Sentinel SOAR\", \"Logic App connector\".securityrustazureVotes: 0GitHub stars: 4
SecretsARouting agent for Secrets & Certificate Management. Delegates to specialist agents for HashiCorp Vault, Azure Key Vault, AWS Secrets Manager, CyberArk, Doppler, Infisical, 1Password, SOPS, and PKI/certificate tooling. WHEN: \"secrets management\", \"secret rotation\", \"certificate management\", \"PKI\", \"key vault\", \"HSM\", \"envelope encryption\", \"credential storage\". Do NOT use for platform-specific questions -- use the `vault`, `azure-key-vault`, `aws-secrets`, `cyberark`, `doppler`...securityrustgoVotes: 0GitHub stars: 4
ScaAExpert routing agent for Software Composition Analysis (SCA). Covers open source vulnerability management, CVE/CVSS scoring, license compliance, SBOM generation, reachability analysis, and dependency update automation. Routes to Snyk OSS, Dependabot, Mend, and Black Duck. WHEN: \"SCA\", \"software composition analysis\", \"open source vulnerabilities\", \"dependency scanning\", \"CVE\", \"SBOM\", \"license compliance\", \"supply chain security\", \"transitive dependencies\", \"dependency upda...securityjavascriptpythonVotes: 0GitHub stars: 4
RubrikAExpert agent for Rubrik Security Cloud and CDM. Covers immutable filesystem, anomaly detection, threat hunting with YARA/IOCs, data classification, orchestrated recovery, Polaris GPS policy management, and ransomware resilience. WHEN: \"Rubrik\", \"CDM\", \"Rubrik Cloud Data Management\", \"Polaris\", \"Rubrik Security Cloud\", \"Live Mount\", \"threat hunting\", \"anomaly detection\", \"Rubrik cluster\", \"data classification\".securityrustgoVotes: 0GitHub stars: 4