adriannoes/awesome-agentic-ai
58 skills
$npx skills add adriannoes/awesome-agentic-aiSkillInstalls
achieving-cmmc-level-2-compliancePrepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements…acquiring-disk-image-with-dd-and-dcflddanalyzing-android-malware-with-apktoolPerform static analysis of Android APK malware samples using apktoolanalyzing-api-gateway-access-logsanalyzing-azure-activity-logs-for-threatsanalyzing-bootkit-and-rootkit-samplesanalyzing-browser-forensics-with-hindsightanalyzing-cloud-storage-access-patternsanalyzing-dns-logs-for-exfiltrationanalyzing-linux-audit-logs-for-intrusionanalyzing-persistence-mechanisms-in-linuxanalyzing-powershell-empire-artifactsanalyzing-ransomware-network-indicatorsIdentify ransomware network indicators including C2 beaconing patterns,analyzing-sbom-for-supply-chain-vulnerabilitiesParses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSONassessing-vector-and-embedding-weaknessesTest vector stores for embedding inversion, cross-tenant leakage, and poisoning.auditing-aws-s3-bucket-permissionsSystematically audit AWS S3 bucket permissions to identify publiclyauditing-mcp-servers-for-tool-poisoningScan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.auditing-uefi-firmware-with-chipsecUse Intel CHIPSEC to assess platform firmware configuration, SPI flash write protection, BIOS lock, SMM/SMRR, and Secure Boot variable state, dump SPI flash,…browserstackRun tests on BrowserStack. Use when user mentions "browserstack", "cross-browser", "cloud testing", "browser matrix", "test on safari", "test on firefox", or…building-automated-malware-submission-pipelineBuilds an automated malware submission and analysis pipeline that collectsbuilding-cloud-siem-with-sentinelThis skill covers deploying Microsoft Sentinel as a cloud-native SIEMbuilding-detection-rules-with-sigmaBuilds vendor-agnostic detection rules using the Sigma rule format forbuilding-devsecops-pipeline-with-gitlab-ciDesign and implement a comprehensive DevSecOps pipeline in GitLab CI/CDbuilding-incident-response-playbookDesigns and documents structured incident response playbooks that definebuilding-super-timelines-with-plasoGenerate log2timeline and Plaso super-timelines and triage them in Timesketch.building-threat-hunt-hypothesis-frameworkBuild a systematic threat hunt hypothesis framework that transforms threatcollecting-indicators-of-compromiseSystematically collects, categorizes, and distributes indicators ofconducting-cloud-incident-responseResponds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,conducting-cyber-risk-assessment-with-nist-800-30Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and…containing-active-breachExecutes containment strategies to stop active adversary operationscontinuous-llm-red-teaming-with-promptfooWire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build…correlating-security-events-in-qradarCorrelates security events in IBM QRadar SIEM using AQL (Ariel QuerycoverageAnalyze test coverage gaps. Use when user says "test coverage", "what's not tested", "coverage gaps", "missing tests", "coverage report", or "what needs…defending-llms-with-guardrailsDeploy Llama Guard, NeMo Guardrails, and LLM Guard input/output scanners as runtime defenses.deobfuscating-javascript-malwareDeobfuscates malicious JavaScript code used in web-based attacks, phishingdeobfuscating-powershell-obfuscated-malwareSystematically deobfuscate multi-layer PowerShell malware using AST analysis,detecting-ai-model-prompt-injection-attacksDetects prompt injection attacks targeting LLM-based applications usingdetecting-aws-cloudtrail-anomaliesDetect unusual API call patterns in AWS CloudTrail logs using boto3,detecting-beaconing-patterns-with-zeekPerforms statistical analysis of Zeek conn.log connection intervalsdetecting-data-and-model-poisoningIdentify poisoned training data and backdoored models across the ML pipeline.detecting-dcsync-attack-in-active-directoryDetect DCSync attacks where adversaries abuse Active Directory replicationdetecting-dependency-confusionDetect and prevent public-over-private name resolution in npm, PyPI, and Maven.detecting-dll-sideloading-attacksDetect DLL side-loading attacks where adversaries place malicious DLLsdetecting-email-account-compromiseDetect compromised O365 and Google Workspace email accounts by analyzingdetecting-email-forwarding-rules-attackDetect malicious email forwarding rules created by adversaries to maintaindetecting-entra-offensive-tools-in-graph-logsHunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics for fingerprints of offensive Entra ID tools such as ROADtools,…detecting-fileless-malware-techniquesDetects and analyzes fileless malware that operates entirely in memorydetecting-indirect-prompt-injectionDetect and defend against prompt injection hidden in documents, web pages, and images consumed by an agent.detecting-insider-data-exfiltration-via-dlpDetects insider data exfiltration by analyzing DLP policy violations,fixFix failing or flaky Playwright tests. Use when user says "fix test", "flaky test", "test failing", "debug test", "test broken", "test passes sometimes", or…generateGenerate Playwright tests. Use when user says "write tests", "generate tests", "add tests for", "test this component", "e2e test", "create test for", "test…initSet up Playwright in a project. Use when user says "set up playwright", "add e2e tests", "configure playwright", "testing setup", "init playwright", or "add…migrateMigrate from Cypress or Selenium to Playwright. Use when user mentions "cypress", "selenium", "migrate tests", "convert tests", "switch to playwright", "move…pwProduction-grade Playwright testing toolkit. Use when the user mentions Playwright tests, end-to-end testing, browser automation, fixing flaky tests, test…reportGenerate test report. Use when user says "test report", "results summary", "test status", "show results", "test dashboard", or "how did tests go".reviewReview Playwright tests for quality. Use when user says "review tests", "check test quality", "audit tests", "improve tests", "test code review", or…skill-security-auditorSecurity audit and vulnerability scanner for AI agent skills before installation.testrailSync tests with TestRail. Use when user mentions "testrail", "test management", "test cases", "test run", "sync test cases", "push results to testrail", or…