Навыков: 4 624. Сортировка по числу звёзд.
Use this skill when a carrier's CSA peer group changes. Covers what triggers reassignment, how percentile changes affect...
Security audit: supported static findings; qualified profiles add reproduction and repair candidates. (gstack)
Chief Security Officer mode. (gstack)
Chief Security Officer mode. (gstack).
Security audit skill — systematic OWASP + STRIDE review of a project. Covers attack surface, secrets archaeology, depend...
首席安全官审计。结合 OWASP Top 10、STRIDE、供应链、CI/CD、Secrets、 Webhook、AI/LLM 风险与技能供应链，生成低噪声安全报告。 (gstack)
Generate Content Security Policy (CSP) header configurations for web security. Triggers on "create csp header", "generat...
Cross-Site Request Forgery (CSRF) tricks authenticated users into submitting forged requests to a target application by...
Implement Cross-Site Request Forgery (CSRF) protection using tokens, SameSite cookies, and origin validation. Use when b...
Implements CSRF protection using synchronizer tokens, double-submit cookies, and SameSite attributes. Use when securing...
Csrf Protection Validator - Auto-activating skill for Security Fundamentals.Triggers on: csrf protection validator, csrf...
Research crypto news, public market data, and monitored accounts with CT Monitor. Use for attributed briefings, watchlis...
CTF competition assistant helping participants solve security challenges. Challenge analysis, vulnerability identificati...
Provides cryptography attack techniques for CTF challenges. Use when attacking encryption, hashing, signatures, ZKP, PRN...
CTF crypto challenge playbook — read the provided encryption script like a spec, attack RSA parameter weaknesses, XOR/mu...
Miscellaneous CTF challenge techniques. Use for encoding puzzles, RF/SDR signal processing, Python/bash jails, DNS explo...
Provides web exploitation techniques for CTF challenges. Use when the target is primarily an HTTP application, API, brow...
examine a given development story and decide if it has security value that warrants inclusion in a threat model
Detect, classify, and mark Controlled Unclassified Information (CUI) per 32 CFR Part 2002. Scans documents and ArangoDB...
Use when assessing whether Cull is ready to release, auditing or dry-running a Cull release, identifying version blocker...
Convert an amount between two currencies using live rates
Review one or more PRs in Dylan's style: up to 7 copy-pasteable asks and one 🟢/🟡/🔴 call. Quick by default; "deep" add...
Create and deploy custom IOCs, YARA rules, Sigma rules, and STIX indicators for THOR scans.
Use when the user wants to create or manage a Specialist agent or create, revise, publish, or delete a Skill through the...
Research CVEs and security advisories for project dependencies. Uses Exa, NVD API, OSV.dev, and GitHub Advisory Database...
Audit CVE/vulnerability source coverage for a technology stack. Maps each component (container, library, base image, run...
CVE triage workflow for vulnerability analysis, reproduction assessment, and patch verification
Plan responsible CVE disclosure, guide silent fixes, and BLOCK all public GitHub actions until CVE is properly handled
Extract CVSS (Common Vulnerability Scoring System) scores from vulnerability data sources with proper fallback handling....
Use to audit whether customer support is reachable for people with access needs — channels, hours, authentication barrie...
Use to measure which help articles actually resolve contacts versus merely being read, including contact-after-view and...
Use to audit a customer-facing support bot or AI agent for harm rather than for volume — manipulation and prompt-injecti...
Use to prove that a support process, policy or script change actually took effect — when, for whom, and whether behaviou...
Use to audit arrears, collections and financial-difficulty conversations for fair treatment — forbearance offered, press...
Use to monitor support conversations for conduct risk — pressure, mis-selling, unfair outcomes, obstruction and misleadi...
Use to test whether a support control actually operates, the way an auditor would test it, rather than confirming it exi...
Use to audit how payment disputes, chargebacks and unrecognised-transaction claims are handled against scheme deadlines...
Use to find upgrade, seat-growth and new-use-case signals that customers give support and nobody routes anywhere. Trigge...
Use to review how an outsourcer, BPO or vendor handles your customer data and meets your conduct obligations, using evid...
Use to identify signals of customer vulnerability in support conversations and audit whether they were recognised and ac...
Sofortmassnahmen bei aktivem Cyber-Vorfall Ransomware Datenexfiltration oder Insider-Threat. Anwendungsfall Cyberangriff...
Build incident response timelines and report packs from event logs. Use for detection-to-recovery reporting, phase track...