Help with 5A992/5D992 (and related) encryption classification, License Exception ENC/TSR, mass market and TSU, and when BIS/NSA notification or annual self-classification — from…
Render an encryption-controls briefing video (MP4) from an exchek-encryption JSON sibling. Animated ECCN reveal (5A992 / 5D992 etc.) with ENC notification status, mass-market…
Diagnose and mitigate exec-related tooling failures around ClawHub publishing and GitHub CLI queries (auth, browser-login, missing dependencies, pending security-scan visibility…
Structured command execution with security levels, color-coded output, and 4-line max summaries. Enforces transparency and visibility for all shell commands.
使い捨ての Python / shell スクリプトを sandbox 内で実行する前に、 haiku Agent で security pre-review を通して安全性を判定する。
Executes authorized attack simulations against Active Directory environments to identify misconfigurations,
Execute a comprehensive AI-driven development workflow with planning, implementation, multi-layer review (Sub-agents + /review + CodeRabbit CLI), automated fixes, and PR creation.
Drive a federal system through the NIST Risk Management Framework (SP 800-37 Rev 2) to an Authorization to Operate (ATO): Prepare, Categorize (FIPS 199), Select a control baseline…
Executes authorized phishing simulation campaigns to assess an organization''s susceptibility to email-based
Red team engagement planning is the foundational phase that defines scope, objectives, rules of engagement (ROE),
Executes comprehensive red team exercises that simulate real-world adversary operations against an organization''s
Hands-off coding executor: one command → build → evaluate → localhost ready. Master controller, ephemeral ECC subagents, durable plan.dag.json state, deferred security review,…
Use when setting up or managing pentest environments with Exegol, launching offensive security containers, configuring VPN/network for engagements, or when the user mentions…
Create Harness STO security exemptions (waivers) for vulnerabilities found by SAST, SCA, DAST, secret, container, or IaC scanners.
Use to inventory an existing backend before changing it — framework, structure, API surface, auth/authorization model, data layer, jobs, integrations, tests, security posture.
Use when a codebase already exists, before proposing any changes. It inventories structure, stack, applications present, tests, security posture, and implementation state so…
The single interface for building, improving, and debugging exo workflows. Routes to one of three intents.
Audit the Exobrain harness REPO itself — scans tracked files for leaked personal data, checks legibility for stranger cloning, analyzes architecture, and surfaces AI productivity…
Orchestrate evidence-gated AI software delivery from an ambiguous request through product framing, implementation, verification, operational safety, and durable closeout.
Use when the user wants to act on an audit, fix the findings in a line-check/bug-hunt/security-sweep report, work a prioritized backlog, or asks to "fix the findings", "work the…
Coordinate field feeding, hydration, ration quality, and expeditionary aquaculture fallback options for U.S.
Dodaje fakturę zakupu (koszt) do rejestru SQLite — zapisuje sprzedawcę, NIP, kwoty, kategorię, datę wpływu.
Use when designing or configuring public pages on an Experience Cloud site — guest user profile setup, page-level access settings in Experience Builder, object/field visibility…
Use when configuring access controls, sharing, or site security for authenticated or guest Experience Cloud (community) users: external OWD, Sharing Sets, Share Groups, CSP,…
Selects the most relevant experiences, projects, awards, and credentials from the master context based on JD keywords.
Dispatches `forge-expert` subagents in parallel — one per chosen domain — to produce focused analyses of a feature against the codebase before a plan is drafted.
Surfaces inconsistencies, opinion shifts, methodological flaws, and credential discrepancies across expert reports, transcripts, CVs, and publications for impeachment,…
ACTIVATE when the user asks for expert analysis in non-code domains like security audits, product management, competitive analysis, vendor evaluation, or architecture review.
Produces structured expert witness analyses covering qualifications, opinions, methodology, admissibility (Daubert/Frye), and cross-examination vulnerabilities.
Critiques opposing expert witness reports for admissibility challenges, disclosure deficiencies, and cross-examination vulnerabilities.
Analizuje endpoint Express — wyjaśnia co robi, jakie ma wektory ataku (OWASP), jak zabezpieczyć. Używaj przy nauce nowych endpointów lub security.
Explain the SOVD Security Helper project architecture, API, and purpose. Use when someone asks what this project does or needs onboarding context.
Tests OAuth 2.0 and OpenID Connect implementations for security flaws including authorization code interception, redirect URI manipulation, CSRF in OAuth flows, token lea — from…
Custom exploit development workflow — write, test, and iterate on exploit code for discovered vulnerabilities.
Systematic methodology for developing reliable exploits from vulnerability discovery to weaponization
Develop working exploits using pwntools. Includes exploit template and common patterns.
Exploit researcher persona specializing in attack surface analysis, exploit scenario generation, and vulnerability chaining
Real-World Exploit Priority (RWEP) scoring — CVSS plus KEV, PoC, AI-acceleration, blast radius, live-patch factors
Assess whether discovered vulnerabilities are actually exploitable in your application context using CVSS scoring, attack path analysis, reachability.
Comprehensive knowledge about vulnerability exploitation and initial access. Provides expertise on finding and adapting exploits, adapting proof-of-concepts, gaining shel — from…
Use when you are in the Bayesian optimization loop after fitting a Gaussian Process model to observed LC gradient runs, and you need to propose the next gradient to evaluate.
Comprehensive knowledge about vulnerability exploitation and initial access. Provides expertise on finding and adapting exploits, adapting proof-of-concepts, gaining shel — from…
Exploit misconfigured Active Directory Certificate Services (AD CS) ESC1 vulnerability to request certificates
BloodHound is a graph-based Active Directory reconnaissance tool that uses graph theory to reveal hidden and
Enumerate and exploit Active Directory Certificate Services ESC1 through ESC16 misconfigurations with Certipy, including SAN abuse, NTLM relay to web enrollment (ESC8), and golden…
Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP
Runs the Pacu AWS exploitation framework end-to-end — session and credential setup, IAM enumeration, automated privilege-escalation scanning via iam__privesc_scan, and…
Analyzes and simulates BGP hijacking scenarios in authorized lab environments to assess route origin validation,
Tests APIs for Broken Function Level Authorization (BFLA) vulnerabilities where regular users can invoke administrative
Discover and exploit broken link hijacking vulnerabilities by identifying references to expired domains, decommissioned
Exploit Kerberos Constrained Delegation misconfigurations in Active Directory to impersonate privileged users
Tests and exploits deep link (URL scheme and App Link) vulnerabilities in Android and iOS mobile applications
Tests APIs for excessive data exposure where endpoints return more data than the client application needs, relying
Detecting and exploiting HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding
Identifying and exploiting Insecure Direct Object Reference vulnerabilities to access unauthorized resources
Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including
Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .NET applications
Identifies and exploits IPv6-specific vulnerabilities including SLAAC spoofing, Router Advertisement flooding,
Exploits JWT algorithm confusion vulnerabilities where the server''s token verification library accepts the
Perform Kerberoasting attacks using Impacket's GetUserSPNs to extract and crack Kerberos TGS tickets for Active