Навыки: Безопасность

Complete Tier 1 triage workflow. Orchestrates the full alert triage process: check-duplicates, triage-alert, enrich-ioc...

Complete Tier 2 investigation workflow. Orchestrates deep investigation of escalated cases: deep-dive-ioc, correlate-ioc...

Orchestrate comprehensive multi-dimensional code review using specialized review agents

已知地址判断函数用途/算法（无符号函数命名）：先查 .dynsym，再取字符串/魔数/成对调用特征，最后回填命名。SO 层深挖的单步能力，入口仍在 frida-mobile-security；恢复结构体用 rev-struct，判漏洞用 n...

Perform ultra-granular, per-function deep analysis to build security audit context. The sole purpose is pure context bui...

Create, validate, import, execute, and export CrowdStrike Falcon Fusion SOAR workflows. CRITICAL: You MUST run action_se...

Receive and verify FusionAuth webhooks. Use when setting up FusionAuth webhook handlers, debugging JWT signature verific...

Design coverage-guided fuzzing campaigns: choose a fuzz target, write a deterministic harness (libFuzzer/cargo-fuzz, Ath...

Continuous fuzzing as a security control — coverage-guided fuzz (AFL++/libFuzzer), AI-assisted fuzz, OSS-Fuzz integratio...

Configure perform API fuzzing to discover edge cases, crashes, and security vulnerabilities. Use when performing special...

Threat-models competitive gameplay — client manipulation, impossible moves, altered seeds, replay attacks, forged scores...

Design performant in-game HUDs, interactive menus, responsive screen canvas layouts, and gamepad navigation.

Manage Gate entities — validation checkpoints that WorkItems, scopes, or policy applications must pass (code review, sec...

Validate that quality, security, and release gates are correctly defined, implemented, and enforced with evidence.

The drum sounds. Spider, Raccoon, and Turtle gather for complete security work. Use when implementing auth, auditing sec...

Auditing SKILL.md normalization and compliance: scans the 21-item checklist, classifies violations, produces fix snippet...

Configure GCP Cloud Audit Logs for compliance. Set up log routing and BigQuery analysis. Use when auditing GCP activity.

GCP 방화벽 규칙 관리

Manages identity and access control for Google Cloud resources using IAM policies and roles.

GCP IAM 서비스 계정 및 권한 관리

GCP Secret Manager 조회/추가/관리

Secure secrets in Google Cloud Secret Manager. Configure IAM policies, integrate with GKE, and manage secret versions. U...

GCP security configuration scanning and hardening using Security Command Center, Forseti, and ScoutSuite

Managed-custody authentication — shared API key login, session keypair generation, encrypted computedData payloads, AES-...

GDPR compliance implementation. Data subject rights (access, deletion, portability), consent management, data processing...

Audit GDPR compliance covering Article 6 lawful basis, DPIAs, right-to-be-forgotten, and cross-border transfers.

Elite incident response and legal compliance guidance for data breaches under GDPR Articles 33 & 34. Use when: (1) User...

Verify GDPR/CNIL compliance on entities

Ensure GDPR compliance for marketing activities including consent management, data processing, privacy notices, and data...

Use when handling PII or financial data — checklist against BDSG/GDPR.

Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2...

Implement GDPR requirements for EU data protection including data subject rights, consent management, and breach notific...

Implement GDPR-compliant consent management for desktop applications

Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when bui...

Drafts GDPR Article 28-compliant Data Processing Addenda with schedules ready for execution. Use when drafting or updati...

Guides the creation and review of data processing agreements under GDPR Article 28(3), covering all eight mandatory clau...

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks dat...

Professional Gdpr Enforcer Expert skill. Implement enterprise-grade web application security controls and encryption sta...

Guides the audit of Records of Processing Activities (RoPA) against GDPR Article 30 requirements for both controllers an...

KYC-Onboarding neuer Kunden mit Identifizierung Risikoklassifizierung und Freigabe nach GwG. Anwendungsfall neue Geschäf...

Natural-language orchestration of security tools through Gemini. Translates intent ("scan this scope for exposed admin p...

Generates structured cyber threat intelligence reports at strategic, operational, and tactical levels tailored to specif...

Guides writing an audit or fix report that survives interruption, links to the runs before and after it, closes with an...

Use the AWF (Agentic Workflow Firewall) to run commands with network isolation and domain whitelisting. Provides L7 HTTP...

Audit the GitHub Actions workflows in this repo for security, speed, and correctness, and report findings with a propose...

Find exploitable vulnerabilities in GitHub Actions workflows. Every finding MUST include a concrete exploitation scenari...

Deep integration with Ghidra and IDA Pro for binary analysis and reverse engineering

Reverse engineering assistant powered by Ghidra. Use for binary analysis, decompilation, vulnerability research, auditin...