Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 26,878
pages available: 1,120

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 529–552 of 26,878 skills

Recorded FutureAExpert agent for Recorded Future Intelligence Cloud. Covers Collective Insights AI/NLP analysis, Intelligence Cards, risk scoring, Identity Intelligence, Vulnerability Intelligence, Brand Intelligence, SIEM/SOAR integration, and the RF browser extension. WHEN: \"Recorded Future\", \"RF\", \"Intelligence Card\", \"Collective Insights\", \"risk score\", \"RF Portal\", \"Recorded Future API\", \"RF Intelligence\", \"Mastercard threat intel\".securityrustgoVotes: 0GitHub stars: 4
Rapid7AExpert agent for Rapid7 InsightVM. Covers console and distributed scan engine architecture, Insight Agent, Active Risk scoring, Remediation Hub, asset groups, SQL-like query for assets, dashboards, Metasploit integration, and InsightConnect SOAR automation. WHEN: \"Rapid7\", \"InsightVM\", \"Nexpose\", \"Insight Agent\", \"Active Risk\", \"Remediation Hub\", \"scan engine\", \"InsightConnect\", \"Rapid7 dashboard\".securitypythongoVotes: 0GitHub stars: 4
QualysAExpert agent for Qualys VMDR, TotalCloud, and the Qualys Cloud Platform. Covers Cloud Agent, scanner appliances, QQL, asset groups, TruRisk scoring, VMDR workflows, TotalCloud CNAPP, WAS, and Policy Compliance. WHEN: \"Qualys\", \"VMDR\", \"QQL\", \"Qualys Cloud Agent\", \"TruRisk\", \"TotalCloud\", \"Qualys scanner appliance\", \"Qualys CSAM\", \"Qualys WAS\", \"CSAM\".securityshellbashVotes: 0GitHub stars: 4
ProofpointAExpert agent for Proofpoint Email Protection. Covers SEG, Targeted Attack Protection, URL Defense, Very Attacked People, TRAP post-delivery remediation, and email DLP. WHEN: \"Proofpoint\", \"Proofpoint SEG\", \"TAP\", \"Targeted Attack Protection\", \"URL Defense\", \"TRAP\", \"Nexus People Risk\", \"Very Attacked People\", \"VAP\", \"Proofpoint quarantine\", \"Proofpoint DLP\".securityrustgoVotes: 0GitHub stars: 4
Prisma AccessAExpert agent for Palo Alto Networks Prisma Access and SASE. Covers ZTNA 2.0, GlobalProtect agent, cloud FWaaS, ADEM digital experience, CASB, and Prisma SD-WAN integration. WHEN: \"Prisma Access\", \"Palo Alto SASE\", \"GlobalProtect\", \"ZTNA 2.0\", \"Prisma SD-WAN\", \"ADEM\", \"Palo Alto cloud firewall\", \"Strata Cloud Manager\", \"Panorama SASE\".securityrustgoVotes: 0GitHub stars: 4
OverviewATop-level routing agent for ALL security technologies and disciplines. Provides cross-domain expertise in security architecture, risk assessment, defense-in-depth, compliance frameworks, and threat modeling. WHEN: \"security architecture\", \"threat model\", \"NIST CSF\", \"MITRE ATT&CK\", \"defense in depth\", \"zero trust\", \"security assessment\", \"compliance framework\", \"CIS benchmarks\", \"incident response\", \"security posture\", \"attack surface\", \"risk management\", \"security ...securityrustgoVotes: 0GitHub stars: 4
NetskopeAExpert agent for Netskope One SSE/SASE. Covers NewEdge infrastructure, CASB (40K+ apps), SWG, ZTNA Next, ML-powered DLP, UEBA, and Advanced Analytics. WHEN: \"Netskope\", \"Netskope CASB\", \"Netskope SWG\", \"Netskope ZTNA\", \"NewEdge\", \"Netskope DLP\", \"Netskope UEBA\", \"Netskope One\", \"Netskope inline\", \"Netskope tenant\".securityjavascriptpythonVotes: 0GitHub stars: 4
MispAExpert agent for MISP (Malware Information Sharing Platform). Covers events, attributes, objects, galaxies, taxonomies, correlation engine, sharing groups, feeds, PyMISP, STIX/TAXII export, warninglists, and misp-modules enrichment. WHEN: \"MISP\", \"Malware Information Sharing Platform\", \"MISP event\", \"MISP feed\", \"PyMISP\", \"MISP galaxy\", \"MISP taxonomy\", \"MISP object\", \"sharing group\", \"misp-modules\".securitypythonrustVotes: 0GitHub stars: 4
MimecastAExpert agent for Mimecast Email Security. Covers SEG, targeted threat protection, email continuity, DMARC analyzer, awareness training, and archiving/compliance. WHEN: \"Mimecast\", \"Mimecast SEG\", \"Mimecast URL protection\", \"Mimecast impersonation\", \"Mimecast continuity\", \"Mimecast DMARC\", \"Mimecast archive\", \"Mimecast awareness training\".securityrustgoVotes: 0GitHub stars: 4
MandiantAExpert agent for Mandiant Threat Intelligence (Google). Covers APT/UNC actor tracking, Advantage platform modules, breach analytics, Attack Surface Management, Digital Threat Monitoring, Security Validation, Google SecOps/Chronicle integration, and Mandiant IR consulting expertise. WHEN: \"Mandiant\", \"Google Threat Intelligence\", \"GTI\", \"Advantage\", \"APT group\", \"UNC group\", \"breach analytics\", \"Mandiant IR\", \"FireEye\", \"Mandiant Academy\".securitygoswiftVotes: 0GitHub stars: 4
IamARouting agent for Identity & Access Management technologies. Covers SSO, MFA, federation, provisioning, governance, and cross-platform IAM architecture. WHEN: \"IAM\", \"identity management\", \"access management\", \"SSO\", \"MFA\", \"federation\", \"SCIM provisioning\", \"identity governance\", \"access review\", \"zero trust identity\". Do NOT use for platform-specific questions -- use the `entra-id`, `okta`, `ad-ds`, `auth0`, `keycloak`, `ad-fs`, `ad-cs`, `ping-identity`, `aws-iam`, `gcp-...securityrustgoVotes: 0GitHub stars: 4
Entra IdAExpert agent for Microsoft Entra ID (formerly Azure AD). Provides deep expertise in Conditional Access, PIM, Identity Protection, Entra Connect, B2B/B2C, app registrations, managed identities, and Entra ID Governance. WHEN: \"Entra ID\", \"Azure AD\", \"Conditional Access\", \"PIM\", \"Identity Protection\", \"Entra Connect\", \"B2B\", \"B2C\", \"app registration\", \"service principal\", \"managed identity\", \"passkeys Entra\", \"Entra Permissions Management\".securityrustgoVotes: 0GitHub stars: 4
Email SecurityAExpert routing agent for email security. Covers email authentication (SPF/DKIM/DMARC/BIMI), secure email gateways, API-based protection, phishing/BEC defense, and post-delivery remediation. WHEN: \"email security\", \"phishing\", \"BEC\", \"email gateway\", \"SPF\", \"DKIM\", \"DMARC\", \"email authentication\", \"secure email gateway\", \"SEG\". Do NOT use for vendor-specific questions -- use the `proofpoint`, `mimecast`, `abnormal`, `defender-o365`, or `sublime` skill.securityrustgoVotes: 0GitHub stars: 4
EdrAExpert routing agent for Endpoint Detection & Response (EDR). Routes to platform-specific agents for CrowdStrike, Defender for Endpoint, SentinelOne, Carbon Black, Cortex XDR, Elastic Defend, Sophos, and Wazuh. Covers cross-platform EDR concepts, detection methodology, and platform selection. WHEN: \"EDR\", \"endpoint detection\", \"endpoint protection\", \"behavioral detection\", \"IOC\", \"IOA\", \"MITRE ATT&CK\", \"threat hunting\", \"endpoint telemetry\", \"XDR\". Do NOT use for platform-...securitygoshellVotes: 0GitHub stars: 4
DlpAExpert routing agent for Data Loss Prevention. Classifies DLP requests across endpoint, network, and cloud enforcement layers, then delegates to the appropriate technology agent. WHEN: \"DLP\", \"data loss prevention\", \"data exfiltration\", \"sensitive data leak\", \"data classification\", \"content inspection\", \"USB block\", \"email DLP\", \"cloud DLP\", \"CASB\", \"data discovery\". Do NOT use for vendor-specific questions -- use the `purview-dlp`, `symantec-dlp`, `forcepoint`, `digital...securityrustgoVotes: 0GitHub stars: 4
Defender EndpointAExpert agent for Microsoft Defender for Endpoint (MDE). Covers onboarding, ASR rules, advanced hunting with KQL, automated investigation, device groups, vulnerability management, and Defender XDR integration. WHEN: \"Defender for Endpoint\", \"MDE\", \"ASR rules\", \"advanced hunting\", \"KQL\", \"Microsoft EDR\", \"AIR\", \"Defender XDR\", \"MDE Plan 2\", \"threat analytics\".securityjavascriptrustVotes: 0GitHub stars: 4
DastAExpert routing agent for Dynamic Application Security Testing (DAST). Covers runtime scanning fundamentals, active vs. passive scanning, authenticated scanning, API security testing, and CI/CD DAST integration. Routes to Burp Suite, OWASP ZAP, and StackHawk. WHEN: \"DAST\", \"dynamic analysis\", \"runtime scanning\", \"intercepting proxy\", \"active scan\", \"authenticated scan\", \"API security test\", \"web application scan\", \"fuzzing\". Do NOT use for tool-specific questions -- use the `...securitygobashVotes: 0GitHub stars: 4
Container SecurityBRouting and expertise agent for container and Kubernetes security. Covers image scanning, admission control (OPA Gatekeeper, Kyverno), Pod Security Standards, runtime protection, RBAC, network policies, secrets management, supply chain security (cosign/SLSA), and service mesh mTLS. WHEN: \"container security\", \"Kubernetes security\", \"K8s security\", \"image scanning\", \"admission control\", \"OPA Gatekeeper\", \"Kyverno\", \"Pod Security Standards\", \"RBAC Kubernetes\", \"Kubernetes net...securityrustgoVotes: 0GitHub stars: 4
CohesityAExpert agent for Cohesity Data Cloud and DataProtect. Covers SpanFS distributed filesystem, DataLock WORM immutable snapshots, FortKnox SaaS cyber vault, instant mass restore, DataHawk threat scanning, CyberScan, and ransomware resilience. WHEN: \"Cohesity\", \"DataProtect\", \"FortKnox\", \"DataLock\", \"SpanFS\", \"DataHawk\", \"CyberScan\", \"Cohesity cluster\", \"instant mass restore\".securitygosqlVotes: 0GitHub stars: 4
Cloudflare ZtAExpert agent for Cloudflare Zero Trust. Covers Access (ZTNA), Gateway (SWG/DNS), Browser Isolation, CASB, DLP, Email Security (Area 1), Magic WAN, and Cloudflare's 300+ city anycast network. WHEN: \"Cloudflare Zero Trust\", \"Cloudflare Access\", \"Cloudflare Gateway\", \"Cloudflare ZTNA\", \"Cloudflare CASB\", \"Cloudflare Browser Isolation\", \"Cloudflare Workers\", \"Cloudflare Email Security\", \"Area 1\".securityjavascriptrustVotes: 0GitHub stars: 4
Cloudflare WafAExpert agent for Cloudflare WAF. Covers managed rulesets, custom rules (Firewall Rules/WAF Rules), rate limiting, bot management, API Shield, Workers for custom logic, zone configuration, and Cloudflare's edge security platform. WHEN: \"Cloudflare WAF\", \"Cloudflare firewall\", \"Cloudflare managed rules\", \"Cloudflare rate limiting\", \"Cloudflare bot management\", \"API Shield\", \"Cloudflare Workers security\", \"Cloudflare zone\", \"Cloudflare transform rules\".securityjavascripttypescriptVotes: 0GitHub stars: 4
ClearpassAExpert agent for Aruba ClearPass Policy Manager (CPPM). Covers 802.1X NAC, device profiling/fingerprinting, OnGuard posture assessment, guest access with captive portals, TACACS+, ClearPass Insight analytics, OnConnect agentless enforcement, and REST API integration. WHEN: \"ClearPass\", \"CPPM\", \"Aruba NAC\", \"ClearPass policy\", \"OnGuard\", \"ClearPass guest\", \"ClearPass profiling\", \"ClearPass API\", \"ClearPass TACACS+\", \"HPE Aruba NAC\".securityjavascriptgoVotes: 0GitHub stars: 4
Cisco IseAExpert agent for Cisco Identity Services Engine (ISE). Covers 802.1X (EAP-TLS, PEAP), RADIUS, TACACS+, endpoint profiling, posture assessment, guest access, BYOD, pxGrid, TrustSec SGT segmentation, and distributed PAN/MnT/PSN deployment. WHEN: \"Cisco ISE\", \"ISE\", \"802.1X\", \"RADIUS policy\", \"TACACS+\", \"TrustSec\", \"SGT\", \"pxGrid\", \"ISE profiling\", \"posture assessment\", \"NAC\", \"guest portal\", \"BYOD\".securityrustshellVotes: 0GitHub stars: 4
ChronicleAExpert agent for Google Security Operations (Chronicle). Provides deep expertise in YARA-L 2.0 rule development, Unified Data Model normalization, Mandiant threat intelligence integration, entity graph analysis, retroactive rule matching, curated detections, and Google Cloud-native SIEM architecture. WHEN: \"Chronicle\", \"Google SecOps\", \"YARA-L\", \"UDM\", \"Mandiant\", \"curated detections\", \"entity graph\", \"Google SIEM\", \"retroactive matching\", \"Chronicle detection\".securitygoshellVotes: 0GitHub stars: 4