Composer dependency management playbook for safe, systematic package updates. Use when the user asks to update Composer dependencies, audit packages for security vulnerabilities,…
Forensically inspect and repair Composer browser profiles — offline (Chrome OPFS / SQLite extract) or live via /recovery.html debug port.
Composio OAuth integration for external service connections. CSRF-protected flow with state management, connection lifecycle transitions (pending→initiated→active), dynamic tool…
Coinbase Automation: list and manage cryptocurrency wallets, accounts, and portfolio data via Coinbase CDP SDK — from phamlongh230-lgtm/yamtam-engine
Automate Google Drive tasks via Rube MCP (Composio). Always search tools first for current schemas. — from phamlongh230-lgtm/yamtam-engine
Automate Securitytrails tasks via Rube MCP (Composio). Always search tools first for current schemas. — from phamlongh230-lgtm/yamtam-engine
SharePoint Automation: manage sites, lists, documents, folders, pages, and search content across SharePoint and OneDrive — from phamlongh230-lgtm/yamtam-engine
Exhaustive multi-dimensional project auditor covering code, runtime, infrastructure, security, performance, business logic, and human processes across 12 dimensions with — from…
Exhaustive multi-dimensional project auditor covering code, runtime, infrastructure, security, performance, business logic, and human processes across 12 dimensions with — from…
Autonomous compute-reselling agent on Surplus Intelligence - resells free or low-cost provider compute across Bankr, AWS Bedrock, and Google Vertex (GCP) as one skill.
Ability to plan, direct, and oversee the development, operation, and governance of information systems to meet organisational objectives.
Use when a task needs the judgment of a Computer and Information Systems Manager (IT Manager/Director/CIO-adjacent) — planning IT infrastructure and systems strategy, evaluating a…
Analyzes events through computer science lens using computational complexity, algorithms, data structures, systems architecture, information theory, and software engineer — from…
Analyzes events through computer science lens using computational complexity, algorithms, data structures, systems architecture, information theory, and software engineer — from…
Build AI agents that interact with computers like humans do - viewing screens, moving cursors, clicking buttons, and typing text.
Build AI agents that interact with computers like humans do - viewing screens, moving cursors, clicking buttons, and typing text.
Build production computer vision pipelines for object detection, tracking, and video analysis. Handles drone footage, wildlife monitoring, and real-time detection.
Computerbetrug/Phishing anzeigen: Zahlungsdaten, TAN, Social Engineering, Bankkommunikation, Logs und Sofortmaßnahmen im Strafanzeige-Vorbereitung.
Framework for surfacing and tracking tech debt, known bugs, and security gaps in software codebases.
TOCTOU prevention, distributed locking, idempotency keys, race condition detection for Node.js and serverless environments.
Find gaps, overlaps and exclusion problems in Microsoft Entra Conditional Access from read-only Graph exports, resolving who each policy really covers and checking MFA for all…
Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization,
Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment,
Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify…
Perform DCSync attacks to replicate Active Directory credentials and establish domain persistence by extracting
Identifies fulcrum securities in distressed capital structures with enterprise value allocation and recovery sensitivity analysis.
Plan and execute a comprehensive red team engagement covering reconnaissance through post-exploitation using
Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify
Conduct internal Active Directory reconnaissance using BloodHound Community Edition to map attack paths, identify
Complete guide to LINDDUN privacy threat modeling methodology covering seven threat categories: Linking, Identifying, Non-repudiation, Detecting, Data Disclosure, Unawareness, and…
Responds to malware infections across enterprise endpoints by identifying the malware family, determining infection
Simulates man-in-the-middle attacks using Ettercap, mitmproxy, and Bettercap in authorized environments to intercept,
Performs memory forensics analysis using Volatility 3 to extract evidence of malware execution, process injection,
Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security
Pass-the-Ticket (PtT) is a lateral movement technique that uses stolen Kerberos tickets (TGT or TGS) to authenticate
Responds to phishing incidents by analyzing reported emails, extracting indicators, assessing credential compromise,
Spearphishing simulation is a targeted social engineering attack vector used by red teams to gain initial access.
Conducts authorized wireless network penetration tests to assess the security of WiFi infrastructure by testing
Build a personalized preference profile from a small number of well-chosen, cluster-grounded questions instead of a long survey.
Produces structured legal conference summaries capturing session substance, speaker credentials, cited authorities, and practical takeaways.
Secure secret handoff and credential setup wizard for AI agents. Use when you need sensitive information from the user (API keys, passwords, tokens) or need to save credentials to…
Drafts enforceable U.S. Employee Confidentiality and Security Agreements protecting proprietary information, trade secrets, and digital assets, with layered…
Configuration analysis and advisory for F5 XC platform resources. Analyzes customer JSON configurations to answer questions about security posture, feature enablement, mode…
Config scan: detect security misconfigurations in config files, Docker, and IaC. Use when reviewing configuration security for containers, Kubernetes, Terraform, or application…
Scan .claude/ directory for security misconfigurations, exposed secrets, unsafe permissions
Assistente de configuração/instalação do plugin de automação BRP da AJM Advogados. Conduz interativamente a preparação de uma máquina: verifica pré-requisitos, garante o conector…
Configures DNS records and TLS for a service — A/AAAA/CNAME/ALIAS/MX/TXT/CAA, zero-downtime cutovers via pre-lowered TTL, automated ACME/Let's Encrypt/cert-manager issuance and…
Kubernetes-Ingress-Networking mit NGINX-Ingress-Controller, cert-manager fuer automatisiertes TLS-Zertifikat-Management, pfadbasiertes Routing, Rate-Limiting und…
Configures well-known OAuth 2.0 and OpenID Connect discovery endpoints (`oauth-protected-resource`, `oauth-authorization-server`, `openid-configuration`) including the…
Configure code scanning in Harness pipelines using STO security scanners. Helps identify where to inject SAST/SCA scanning steps into existing pipelines, recommends appropriate…
Configures HTTP response security headers and a strict, nonce/hash-based Content-Security-Policy — script-src with a per-request nonce or sha256 hash plus 'strict-dynamic' (so you…
Implement Microsoft's Enhanced Security Admin Environment (ESAE) tiered administration model for Active Directory.
Configures SQL audit logging on CockroachDB clusters to capture security-relevant events including authentication, privilege changes, and sensitive data access.
Configure host-based firewalls (iptables, nftables, UFW) and cloud security groups (AWS, GCP, Azure) with practical rules for common scenarios like web servers, databases, and…
Configures host-based intrusion detection systems (HIDS) to monitor endpoint file integrity, system calls, and
Hardware Security Modules (HSMs) are tamper-resistant physical devices that safeguard cryptographic keys and
Configures and hardens IP allowlists for CockroachDB Cloud clusters to restrict network access to authorized CIDR ranges.
Harden LDAP directory services against common attacks including credential harvesting, LDAP injection, anonymous
Configure secure OAuth 2.0 authorization flows including Authorization Code with PKCE, Client Credentials, and
Configures pfSense firewall rules, NAT policies, VPN tunnels, and traffic shaping to enforce network segmentation,