Skills

Quarkus Security

@affaan-m

Low Risk

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

Security Scan

@affaan-m

Low Risk

Scan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Moodle External API Development

@sickn33

Low Risk

This skill guides you through creating custom external web service APIs for Moodle LMS, following Moodle's external API framework and coding standards.

Frontend Security Coder

@sickn33

Low Risk

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns.

Lint And Validate

@sickn33

Low Risk

MANDATORY: Run appropriate validation tools after EVERY code change. Do not finish a task until the code is error-free.

Red Team Tactics

@sickn33

Low Risk

Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

Security Bluebook Builder

@sickn33

Low Risk

Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

Perl Security

@affaan-m

Low Risk

Comprehensive Perl security covering taint mode, input validation, safe process execution, DBI parameterized queries, web security (XSS/SQLi/CSRF), and perlcritic security policies.

Jira Integration

@affaan-m

Low Risk

Use this skill when retrieving Jira tickets, analyzing requirements, updating ticket status, adding comments, or transitioning issues. Provides Jira API patterns via MCP or direct REST calls.

Python Pptx Generator

@sickn33

Low Risk

Generate complete Python scripts that build polished PowerPoint decks with python-pptx and real slide content.

Node.js Best Practices

@sickn33

Low Risk

Node.js development principles and decision-making. Framework selection, async patterns, security, and architecture. Teaches thinking, not copying.

Homelab Vlan Segmentation

@affaan-m

Low Risk

Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping.

API Documentation

@sickn33

Low Risk

API documentation workflow for generating OpenAPI specs, creating developer guides, and maintaining comprehensive API documentation.

Active Directory Attacks

@sickn33

Low Risk

Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.

Mobile Security Coder

@sickn33

Low Risk

Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns.

Azure Eventhub .NET

@sickn33

Low Risk

Azure Event Hubs SDK for .NET.

Differential Review

@sickn33

Low Risk

Security-focused code review for PRs, commits, and diffs.

Azure Security Keyvault Keys .NET

@sickn33

Low Risk

Azure Key Vault Keys SDK for .NET. Client library for managing cryptographic keys in Azure Key Vault and Managed HSM. Use for key creation, rotation, encryption, decryption, signing, and verification.

Performance Testing Review AI Review

@sickn33

Low Risk

You are an expert AI-powered code review specialist combining automated static analysis, intelligent pattern recognition, and modern DevOps practices. Leverage AI tools (GitHub Copilot, Qodo, GPT-5, C

Semgrep Rule Creator

@sickn33

Low Risk

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.

OSINT Methodology

@elementalsouls

Safe

Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments. Covers the 5-stage recon pipeline, asset-graph discipline, severity rubric, confidence upgrade workflows, time budgeting, identity-fabric mapping, breach×identity correlation, detectability ta

Python FastAPI Development

@sickn33

Low Risk

Python FastAPI backend development with async patterns, SQLAlchemy, Pydantic, authentication, and production API patterns.

Architecture Decision Records

@sickn33

Low Risk

Comprehensive patterns for creating, maintaining, and managing Architecture Decision Records (ADRs) that capture the context and rationale behind significant technical decisions.

Pentest Commands

@sickn33

Low Risk

Provide a comprehensive command reference for penetration testing tools including network scanning, exploitation, password cracking, and web application testing. Enable quick command lookup during security assessments.