Навыки: Безопасность

JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret bru...

Security mitigation reference and bypass catalog: ASLR, DEP/NX, RELRO, stack canaries, CFI, sandboxing, seccomp. Covers...

OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter ab...

Open redirect vulnerability checklist: parameter identification, bypass techniques (URL encoding, double slashes, CRLF i...

Operational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, c...

Race condition (TOCTOU) testing checklist: identifying timing windows, Burp Suite Turbo Intruder, Last-Byte sync techniq...

Authorized offensive security skill for ethical penetration testing, red-team planning, vulnerability validation, reconn...

Server-Side Request Forgery testing checklist: SSRF discovery, blind SSRF with out-of-band, cloud metadata endpoints (AW...

Exploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer o...

Wireless / 802.11 attack methodology for red team engagements and wireless security assessments. Covers monitor-mode set...

WPS (Wi-Fi Protected Setup) PIN attack methodology — Pixie Dust offline attack against vulnerable chipsets (Ralink, Real...

XML External Entity injection testing checklist: classic XXE, blind XXE (out-of-band), XXE via file upload (SVG/docx), X...

Plan and implement OIDC and OAuth 2.0 integration for React or TypeScript frontends and Java or Spring Boot backends. Us...

OIDF適合性テストの実行・結果分析・不合格項目の修正ワークフローを行う際に使用。FAPI 1.0 Advanced/FAPI-CIBAのOIDF認定テスト結果の分析、GAP管理、修正パターンの適用に役立つ。

Drafts a Master Service Agreement for upstream oilfield services (Operator-Contractor). Covers knock-for-knock indemnifi...

Okta-as-IdP red-team attack chain — tenant discovery, user enumeration (multiple vectors), authentication flow analysis...

Receive and verify Okta Event Hooks. Use when setting up Okta event hook handlers, implementing the one-time verificatio...

OKX Agentic Wallet — the single skill for the user's wallet and on-chain execution. Use it whenever the user wants to op...

Review an Ollama deployment for unauthenticated API exposure, model pull from untrusted registries, CORS misconfiguratio...

Set up and run Deepsec vulnerability scans, triage, and CI gates. Use for Deepsec work or an explicitly requested agent-...

Audit npm dependencies for security and updates

Enumerating failure modes via pre-mortem analysis. Systematically identifies failure scenarios for plans, designs, and f...

Verified molt swarms - cryptographically prove your identity with Ed25519 signatures and WorldID proof-of-personhood. Re...

Creates secrets in 1Password using the op CLI. Use when the user needs to store new passwords, API keys, login credentia...

Expert guidance for OPA (Open Policy Agent), the CNCF policy engine for unified authorization across the stack. Helps de...

Use when selecting, using, or distributing open-source software and understanding license obligations. Covers permissive...

Expertise in navigating open-source licenses for AI models and tools, ensuring commercial compliance, managing license o...

Install or set up from the source-backed instructions:

Send a completion request to the OpenAI API

Automated daily security audits for OpenClaw agents with email reporting. Runs deep audits and sends formatted reports.

OpenClaw and NemoClaw operations — sandbox management, inference provider config, policy configuration, Tailscale integr...

Use the Anaconda `ctf` environment and installed crypto tooling for CTF tasks that fit normal Python or CLI cracking rat...

Use the Anaconda `ctf` environment and installed network tooling for packet- and protocol-level CTF tasks. Use when Code...

Use the OpenCROW OSINT stack for username enumeration, archive lookup, and public search workflows. Use when Codex needs...

Use the Anaconda `ctf` environment and installed exploit tooling for binary exploitation and runtime-debugging tasks. Us...

Use the Anaconda `ctf` environment and installed reverse-engineering tooling for binary analysis, symbolic execution, di...

Use the OpenCROW steganography stack for hidden-data triage and extraction. Use when Codex needs `steghide`, `zsteg`, or...

Use the installed web CTF tooling for endpoint discovery, fuzzing, and automated SQL injection workflows. Use when Codex...

Implement modern Core Profile OpenGL rendering, vertex array objects (VAOs), shaders, and texture streaming.

Debug Openrind Desktop sidecars, config, and audit trail

Expert usage of OpenZeppelin Contracts library for secure smart contract development. Covers access control, token stand...

Builds red-team OPSEC plans that connect an authorized objective to observable artifacts, detection risk, countermeasure...

Use when asked to make a Next.js App Router app crawlable, indexable, and search-optimized for sitemaps, robots, canonic...

"Standard Operating Procedure for /optimize phase. Covers performance benchmarking, accessibility audit, security review...

Find missing security controls — sibling functions that skip a control their peers call. Wraps gap_analyzer + cascade ga...

Oregon Corporate Activity Tax is a gross receipts tax (not an income tax) imposed under ORS Chapter 317A on persons with...

Oracle (神谕所) — Life crossroads deliberation room. Convene Sartre, Aurelius, Jung, Frankl, Nietzsche, and Kahneman for ma...

Master dispatcher for Orbit — the WordPress plugin QA framework. Use when the user types "orbit", "/orbit", "orbit help"...