agentsecops/secopsagentkit
32 skills · 335 total installs
$npx skills add agentsecops/secopsagentkitSkillInstalls
sca-trivySoftware Composition Analysis (SCA) and container vulnerability scanning using Aqua Trivy for identifying CVE vulnerabilities in dependencies, container…api-mitmproxyInteractive HTTPS proxy for API security testing with traffic interception, modification, and replay capabilities.dast-nucleiFast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates covering CVEs, OWASP Top 10, misconfigurations,…dast-zapDynamic application security testing (DAST) using OWASP ZAP (Zed Attack Proxy) with passive and active scanning, API testing, and OWASP Top 10 vulnerability…sbom-syftSoftware Bill of Materials (SBOM) generation using Syft for container images, filesystems, and archives.webapp-sqlmapAutomated SQL injection detection and exploitation tool for web application security testing.analysis-tsharkNetwork protocol analyzer and packet capture tool for traffic analysis, security investigations, and forensic examination using Wireshark's command-line…api-spectralAPI specification linting and security validation using Stoplight's Spectral with support for OpenAPI, AsyncAPI, and Arazzo specifications.container-grypeContainer vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit probability, and CISA KEV indicators.container-hadolintDockerfile security linting and best practice validation using Hadolint with 100+ built-in rules aligned to CIS Docker Benchmark.detection-sigmaGeneric detection rule creation and management using Sigma, the universal SIEM rule format.forensics-osquerySQL-powered forensic investigation and system interrogation using osquery to query operating systems as relational databases.iac-checkovInfrastructure as Code (IaC) security scanning using Checkov with 750+ built-in policies for Terraform, CloudFormation, Kubernetes, Dockerfile, and ARM…ir-velociraptorEndpoint visibility, digital forensics, and incident response using Velociraptor Query Language (VQL) for evidence collection and threat hunting at scale.policy-opaPolicy-as-code enforcement and compliance validation using Open Policy Agent (OPA).pytmPython-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and automated security threat identification.recon-nmapNetwork reconnaissance and security auditing using Nmap for port scanning, service enumeration, and vulnerability detection.reviewdogAutomated code review and security linting integration for CI/CD pipelines using reviewdog.sast-banditPython security vulnerability detection using Bandit SAST with CWE and OWASP mapping.sast-semgrepStatic application security testing (SAST) using Semgrep for vulnerability detection, security code review, and secure coding guidance with OWASP and CWE…secrets-gitleaksHardcoded secret detection and prevention in git repositories and codebases using Gitleaks.webapp-niktoWeb server vulnerability scanner for identifying security issues, misconfigurations, and outdated software versions.crack-hashcatAdvanced password recovery and hash cracking tool supporting multiple algorithms and attack modes.dast-ffufFast web fuzzer for DAST testing with directory enumeration, parameter fuzzing, and virtual host discovery.ot-security-assessmentOperational Technology (OT) security assessment using a two-stage methodology: (1) Identification/Discovery of OT devices and protocols, and (2) Vulnerability…pentest-metasploitPenetration testing framework for exploit development, vulnerability validation, and authorized security assessments using Metasploit Framework.privesc-linpeasLinux privilege escalation enumeration and attack surface analysis using LinPEAS (Linux Privilege Escalation Awesome Script).sast-horusecMulti-language static application security testing using Horusec with support for 18+ programming languages and 20+ security analysis tools.sca-blackduckSoftware Composition Analysis (SCA) using Synopsys Black Duck for identifying open source vulnerabilities, license compliance risks, and supply chain security…vuln-defectdojoVulnerability management and findings aggregation using DefectDojo.network-netcatNetwork utility for reading and writing data across TCP/UDP connections, port scanning, file transfers, and backdoor communication channels._template