Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 28,990
pages available: 1,208

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 1,081–1,104 of 28,990 skills

Security Third Party Test Consent ReviewAUse when a task involves checking permissions when an in-scope service depends on a hosting, SaaS, CDN, or identity provider to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain expl...securityrustshellVotes: 0GitHub stars: 2
Security Third Party Service Dependency MapAUse when a task involves mapping vendor-owned dependencies that can receive assessment traffic or evidence to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befo...securityrustshellVotes: 0GitHub stars: 2
Security Third Party Incident Intake ReviewAUse when a task involves handling a security incident notification from a cloud, software, or service provider to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval ...securityrustgoVotes: 0GitHub stars: 2
Security Test Window And Change Freeze CoordinationAUse when a task involves coordinating authorized security testing with service changes and business events to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befo...securityrustshellVotes: 0GitHub stars: 2
Security Test Tool Provenance And Version ReviewAUse when a task involves reviewing the source, version, permissions, and side effects of a security tool before use to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appr...securityrustshellVotes: 0GitHub stars: 2
Security Test Observability Owner NoticeAUse when a task involves aligning authorized security testing with monitoring and operations teams to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before activ...securityrustshellVotes: 0GitHub stars: 2
Security Test Credential Lifecycle ReviewAUse when a task involves controlling credentials issued for a security assessment to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active testing, contai...securityrustshellVotes: 0GitHub stars: 2
Security Test Backout And Service Recovery PlanAUse when a task involves preparing a recoverable test plan before a security change or stateful check to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ac...securityrustshellVotes: 0GitHub stars: 2
Security Test Artifact Cleanup VerificationAUse when a task involves confirming that temporary test artifacts and access are removed after an assessment to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...securityrustshellVotes: 0GitHub stars: 2
Security Target Resolution Drift GuardAUse when a task involves preventing an approved hostname from resolving to an unapproved target during a test to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval b...securityrustshellVotes: 0GitHub stars: 2
Security Target Ownership VerificationAUse when a task involves confirming that a security test target belongs to the consenting organization to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before a...securityrustshellVotes: 0GitHub stars: 2
Security Synthetic Identity Test Account PlanAUse when a task involves creating test identities that safely exercise authorized security controls to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before acti...securityrustshellVotes: 0GitHub stars: 2
Security Ssdf Practice Evidence MapAUse when a task involves mapping secure-development claims to current NIST SSDF practice evidence to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active...securityrustgoVotes: 0GitHub stars: 2
Security Service Account Owner And Expiry AuditAUse when a task involves identifying service accounts without a clear owner, purpose, or review date to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...securityrustgoVotes: 0GitHub stars: 2
Security Secret Exposure Response And RevocationAUse when a task involves responding safely when a credential or key may have appeared in code, logs, or a report to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approva...securityrustgoVotes: 0GitHub stars: 2
Security Scope Expiry And Renewal CheckAUse when a task involves checking whether security testing authorization remains valid after time or scope changes to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appro...securityrustshellVotes: 0GitHub stars: 2
Security Scan Rate And Concurrency PlanAUse when a task involves planning bounded scan pacing for an authorized asset inventory to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active testing, ...securityrustshellVotes: 0GitHub stars: 2
Security Sandbox Equivalence And Isolation ReviewAUse when a task involves choosing a representative test environment without connecting tools to production targets to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appro...securityrustshellVotes: 0GitHub stars: 2
Security Rules Of Engagement MatrixAUse when a task involves translating written testing permission into an action-by-action rules-of-engagement matrix to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appr...securityrustshellVotes: 0GitHub stars: 2
Security Remediation Diff Scope ReviewAUse when a task involves reviewing whether a security-fix change stays within its approved remediation scope to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...securityrustshellVotes: 0GitHub stars: 2
Security Recovery And Residual Access ValidationAUse when a task involves checking that service recovery did not leave incident persistence or unauthorized access behind to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit...securityrustgoVotes: 0GitHub stars: 2
Security Ransomware Restore Readiness TabletopAUse when a task involves evaluating ransomware response and recovery roles through a non-destructive tabletop exercise to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit a...securityrustgoVotes: 0GitHub stars: 2
Security Production Probing Impact BudgetAUse when a task involves setting impact limits for authorized security checks on a live service to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active t...securityrustshellVotes: 0GitHub stars: 2
Security Privileged Account Containment ReviewAUse when a task involves planning an approved containment action for an account with elevated access to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...securityrustgoVotes: 0GitHub stars: 2