Навыки: Безопасность

Add authentication to web apps with Clerk — social login, email/password, magic links, organizations, RBAC, session mana...

Handle user data, privacy, and GDPR compliance with Clerk. Use when implementing data export, user deletion, or privacy...

Configure enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration,...

Reference architecture patterns for Clerk authentication. Use when designing application architecture, planning auth flo...

Automates Clerk JWT token generation, validation, and export for FastAPI integration tests. Use when an agent must refre...

Use when the seller asks why their sales/transactions are failing or being declined, wants failed payments grouped by re...

Write ServiceNow client scripts (onLoad/onChange/onSubmit/onCellEdit) using g_form, g_user, GlideAjax, field visibility/...

Receive and verify Clio (Clio Manage) webhooks. Use when setting up Clio webhook handlers, debugging X-Hook-Signature ve...

Decide whether a finished build is a clone of one already shipped, the way the final_verdict reviewer decides it. Carrie...

Multi-jurisdiction financial close cycle reference framework covering month-end, quarter-end, and year-end close. Provid...

Diseña infraestructura cloud como código — Terraform, AWS, GCP, Azure. Arquitecturas serverless, VPC, bases de datos adm...

Maps cloud identity and authorization paths across AWS, Azure, GCP, and hybrid trust boundaries, separating proven acces...

Flow Nexus authentication and user management. Use for login, registration, session management, password reset, and user...

```python # Check for unauthorized outbound connections ssm.

Attack Azure / Entra ID — managed-identity token theft, Entra (Azure AD) role abuse, and app/ storage misconfig. Load wh...

Turn an exposed container daemon or an over-privileged container into host compromise — a Docker API on 2375/2376, a mou...

Find and loot exposed container registries — image pull/push, secrets baked in layers, and registry misconfig. Load on e...

Attack Google Cloud Platform — metadata/SA token theft, IAM privilege escalation, and storage/ function misconfig. Load...

Cloud Gcp Iam.

Escalate privileges in cloud IAM (AWS/GCP/Azure) from a low-priv set of credentials. Load when you hold cloud creds/keys...

Escalate SSRF to cloud credential theft via the instance metadata service (IMDS). Load when SSRF is confirmed AND the ta...

检查集群身份、工作负载权限、网络与供应链配置

Use for authorized cloud, container, and Kubernetes security assessment including metadata SSRF, IAM misconfig, containe...

Attack exposed Kubernetes: API server, kubelet, etcd, dashboards, and RBAC. Load on k8s signals — ports 6443/10250/2379/...

Hunt cloud misconfigurations exposed externally — open S3/GCS buckets, exposed IAM-tied EC2 metadata, Cognito misconfig,...

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

Find and prove misconfigured cloud object storage (S3/GCS/Azure Blob). Load when assets load from *.s3.amazonaws.com, st...

Use this skill when securing cloud infrastructure, configuring IAM policies, managing secrets, implementing network poli...

Use when assessing cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposu...

Cloud security for mid-2026 — CSPM/CWPP/CNAPP posture, CSA CCM v4, AWS/Azure/GCP shared responsibility, cloud workload i...

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

Master cloud security fundamentals including Identity and Access Management (IAM), encryption, network security, complia...

Assess cloud environments (AWS, GCP, Azure) for authorized security review — public storage and snapshot exposure, IAM o...

Cloud security posture assessment for AWS, Azure, and GCP. Tests IAM privilege escalation paths, public storage exposure...

Cloud security posture skill for AWS, Azure, GCP, and multi-cloud. Covers IAM least-privilege, key and secret hygiene, n...

Cloud infrastructure security patterns for IaC and cloud services. Use when writing or reviewing Terraform, CDK, CloudFo...

Performs a comprehensive cloud security posture review against CIS benchmarks for AWS, GCP, or Azure. Checks identity, n...

Multi-cloud security assessment and penetration testing capabilities. Execute Prowler/ScoutSuite assessments, analyze IA...

Use as the default entrypoint for broad Cloudflare requests when the user has not already named a narrower specialist. C...

Harden a site behind Cloudflare end-to-end, from account to zone to origin. Covers DNS hygiene, origin-IP protection via...

Assess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity...

Plans migrations from Zscaler ZIA/ZPA, Palo Alto, legacy VPN, SWG, or SASE stacks to Cloudflare One. Use for migration a...

This skill should be used when the user asks to "add turnstile", "implement bot protection", "validate turnstile token",...

Protect internal apps with Cloudflare Access, device posture, and Zero Trust policies.

Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it fits with AWS WAF,...

Identify and quantify AWS CloudTrail cost optimization opportunities. Use this skill when a user asks to reduce, review,...

Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in th...

Assess CMMC Level 2/3 compliance by mapping NIST SP 800-171 controls to Embry OS features and detected configurations. G...