briiirussell/cybersecurity-skills
29 skills · 3,798 total installs
$npx skills add briiirussell/cybersecurity-skillsSkillInstalls
owasp-auditAudit application source code against the OWASP Top 10 (2021) vulnerability categories — broken access control, cryptographic failures, injection, insecure…osint-reconGather and correlate open source intelligence from public sources for authorized investigations, threat intelligence, and attack surface assessment.mobile-auditAudit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root…dependency-auditAudit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns.web-pentestPerform black-box / grey-box web application penetration testing on an authorized target — auth bypass, IDOR, session handling, business-logic flaws, parameter…reconPerform structured reconnaissance and attack surface enumeration for authorized penetration tests, CTF challenges, and bug bounty programs.prompt-injectionAudit applications for AI prompt injection, agent security, and LLM permission boundary vulnerabilities.api-auditAudit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023).disk-forensicsAnalyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and CTF challenges.incident-triageGuide rapid triage and initial response to security incidents following NIST SP 800-61 methodology.cloud-auditAudit cloud infrastructure (AWS, GCP, Azure) for misconfigurations, excessive permissions, and security gaps.secrets-auditFind leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks.finding-triageTriage a single security finding — from a scanner, audit, advisory, or report — to a defensible disposition with a mitigation plan, false-positive…threat-modelingRun a structured threat-modeling session for a new feature, system, or architecture — STRIDE, attack trees, data flow diagrams, abuse cases.privacy-engineeringImplement and audit privacy controls in product and infrastructure — GDPR, CCPA / CPRA, LGPD, PIPEDA.crypto-auditAudit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and…vuln-researchResearch a specific CVE or vulnerability disclosure end-to-end — what version is affected, is your code reachable, is there a public PoC, is there a patch,…iam-auditAudit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google…siem-detectionEngineer and audit SIEM detection rules — log source coverage, Sigma / KQL / SPL / Elastic query authoring, MITRE ATT&CK mapping, false-positive tuning, and…red-team-engagementPlan, scope, and execute an authorized red-team engagement — distinct from a penetration test.soc-operationsBuild, run, and improve a Security Operations Center — alert prioritization, runbook authoring, escalation criteria, on-call structure, alert tuning workflow,…threat-huntingConduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an alert yet.breach-patternsLearn from public breach disclosures — extract the audit question each one implies and check your own stack.container-auditAudit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks.pci-auditAudit applications and infrastructure handling payment card data against PCI DSS v4.0.security-commsTranslate technical security work into the language of non-security audiences — board, executives, engineering, customer success, customers, legal,…csf-mappingMap your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover).ai-risk-managementApply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems — model lifecycle governance, fairness and bias evaluation,…hipaa-auditAudit applications and infrastructure handling Protected Health Information against HIPAA — Security Rule (administrative, physical, technical safeguards),…