Skills

Security Audit

@sickn33

Low Risk

Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.

Dependency Management Deps Audit

@sickn33

Low Risk

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

Supply Chain Risk Auditor

@sickn33

Low Risk

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.

Privacy By Design

@sickn33

Low Risk

Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.

Spec To Code Compliance

@sickn33

Low Risk

Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.

Red Team Tools

@sickn33

Low Risk

Implement proven methodologies and tool workflows from top security researchers for effective reconnaissance, vulnerability discovery, and bug bounty hunting. Automate common tasks while maintaining thorough coverage of attack surfaces.

Security Auditor

@sickn33

Low Risk

Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.

Vulnerability Scanner

@sickn33

Low Risk

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.

Skill Sentinel

@sickn33

Low Risk

Auditoria e evolucao do ecossistema de skills. Qualidade de codigo, seguranca, custos, gaps, duplicacoes, dependencias e relatorios de saude.

Quarkus Security

@affaan-m

Low Risk

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

Red Team Tactics

@sickn33

Low Risk

Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

Security Bluebook Builder

@sickn33

Low Risk

Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

Perl Security

@affaan-m

Low Risk

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

Privilege Escalation Methods

@sickn33

Low Risk

Provide comprehensive techniques for escalating privileges from a low-privileged user to root/administrator access on compromised Linux and Windows systems. Essential for penetration testing post-exploitation phase and red team operations.

Homelab Vlan Segmentation

@affaan-m

Low Risk

Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping.

Active Directory Attacks

@sickn33

Low Risk

Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.

Mobile Security Coder

@sickn33

Low Risk

Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns.

Differential Review

@sickn33

Low Risk

Security-focused code review for PRs, commits, and diffs.

Azure Security Keyvault Keys .NET

@sickn33

Low Risk

Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification.

Network 101

@sickn33

Low Risk

Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and security testing against properly configured target systems.

OSINT Methodology

@elementalsouls

Safe

Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the 5-stage recon pipeline, asset-graph discipline, severity rubric, confidence upgrade workflows, time budgeting, identity-fabric mapping, breach×identity correlation, detectability ta

Sast Configuration

@sickn33

Low Risk

Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages.

HTML Injection Testing

@sickn33

Low Risk

Identify and exploit HTML injection vulnerabilities that allow attackers to inject malicious HTML content into web applications. This vulnerability enables attackers to modify page appearance, create phishing pages, and steal user credentials through injected forms.

Pentest Commands

@sickn33

Low Risk

Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments.