briiirussell

cybersecurity-skills

Cybersecurity skills for AI coding agents (Claude Code, Cursor, Codex)

51714k42 skills

Top skills by briiirussell

briiirussell

Cybersecurity Skills

agent-supply-chain-audit

Audit the extensions AI coding agents load and trust (skills, plugins, marketplaces, hooks, settings, MCP servers, and instruction files like CLAUDE.md, AGENTS.md, GEMINI.md, .cursor/rules…

Pack51714kMCP

briiirussell

Cybersecurity Skills

api-audit

Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023). Use when the user mentions 'API security,' 'API audit,' 'BOLA,' 'broken object level authorization,' 'BFLA,'…

briiirussell

Cybersecurity Skills

business-logic-testing

Test an authorized web application for business-logic flaws and race conditions — the classes scanners cannot find. Model invariants (conservation of value, uniqueness, monotonicity…

Pack51714kTesting

briiirussell

Cybersecurity Skills

cicd-security

Audit CI/CD pipelines, GitHub Actions first and GitLab CI and CircleCI briefly, for the paths that give an outsider code execution, secrets or a write token: pull_request_target and…

briiirussell

Cybersecurity Skills

cloud-audit

Audit cloud infrastructure (AWS, GCP, Azure) and PaaS deployment platforms (Vercel, Netlify, Heroku, Render, Railway, Fly) for misconfigurations, excessive permissions, stale or manual…

briiirussell

Cybersecurity Skills

container-audit

Audit container images, Dockerfiles, and Kubernetes manifests for misconfigurations, excessive privileges, exposed secrets, and runtime risks. Use when the user mentions 'container…

briiirussell

Cybersecurity Skills

control-audit

Control-level audit readiness for SOC 2, ISO/IEC 27001:2022 and NIST SP 800-53 Rev. 5 / FedRAMP. Scope the audit (criteria or baseline, systems, period, Type 1 vs Type 2), build the control…

Pack51714kTesting

briiirussell

Cybersecurity Skills

crypto-audit

Audit cryptography implementation — algorithm choice, key sizes, KDF parameters, IV/nonce handling, signature verification, randomness, TLS configuration, and key rotation. Deeper than…

Pack51714kFinance

briiirussell

Cybersecurity Skills

dependency-audit

Audit project dependencies, frameworks, languages, and dev tools for known vulnerabilities, CVEs, and security anti-patterns. Use when the user mentions 'dependency audit,' 'npm audit,'…

briiirussell

Cybersecurity Skills

finding-triage

Triage a single security finding — from a scanner, audit, advisory, report, or a findings.json record — to a defensible disposition with calibrated severity, a mitigation plan…

briiirussell

Cybersecurity Skills

fuzzing-harness

Write and run a fuzzer, fuzz harnesses and property-based tests for the code that handles untrusted bytes (file and packet parsers in C, C++, Rust, Go, Python or JS, decoders, serializers…

Pack51714kTesting

briiirussell

Cybersecurity Skills

hipaa-audit

Audit applications and infrastructure handling Protected Health Information against HIPAA — Security Rule (administrative, physical, technical safeguards), Privacy Rule, Breach Notification…

briiirussell

Cybersecurity Skills

iam-audit

Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application…

Pack51714kDesign

briiirussell

Cybersecurity Skills

mobile-audit

Audit iOS and Android mobile applications against OWASP MASVS / MASTG — insecure storage, weak crypto, certificate pinning, deeplinks, IPC, jailbreak/root detection, reverse-engineering…

Pack51714kMobile

briiirussell

Cybersecurity Skills

native-code-review

Review C, C++ and Rust source for memory-safety bugs: out-of-bounds reads and writes, integer overflow or truncation that feeds a size, use-after-free and double free, format strings…

Pack51714kCode review

briiirussell

Cybersecurity Skills

owasp-audit

Audit application source code against the OWASP Top 10:2025 categories — broken access control (incl. SSRF), security misconfiguration, software supply chain failures, cryptographic…

briiirussell

Cybersecurity Skills

patch-sweep

Respond to a CVE wave across a whole portfolio of apps at once: inventory every repo and the platform project and domain it actually serves, find the real production branch, spot stale…

briiirussell

Cybersecurity Skills

pci-audit

Audit applications and infrastructure handling payment card data against PCI DSS v4.0.1. Heavy emphasis on scope determination (the single most-leveraged variable) plus the…

Pack51714kFinance

briiirussell

Cybersecurity Skills

privacy-engineering

Implement and audit privacy controls in product and infrastructure — GDPR, CCPA / CPRA, LGPD, PIPEDA. Covers data minimization, lawful basis, consent management, data subject access…

briiirussell

Cybersecurity Skills

prompt-injection

Audit applications for AI prompt injection, agent security, and LLM permission boundary vulnerabilities, including chatbots and agents hijacked by what they read: a malicious web page in a…

Pack51714kAI engineering

briiirussell

Cybersecurity Skills

breach-patterns

Learn from public breach disclosures — extract the audit question each one implies and check your own stack. Capital One IMDS abuse, LastPass vault exfiltration, Okta Lapsus$, Snowflake…

briiirussell

Cybersecurity Skills

incident-triage

Guide rapid triage and initial response to a live security incident happening right now (ransomware hitting a file server, an attacker still in the network, a new admin user nobody created…

briiirussell

Cybersecurity Skills

log-watch

Set up a scheduled agent that reads a small team's existing production logs, flags suspicious activity, and pages a human, without a SIEM or security staff. Use when the user mentions 'log…

briiirussell

Cybersecurity Skills

malware-triage

Triage a suspicious file statically and safely, and turn it into something defenders can use: a verdict with confidence and evidence, defanged indicators as CSV or STIX 2.1, a YARA…

briiirussell

Cybersecurity Skills

personal-opsec

Audit one person's own security setup — the founder or operator who holds the keys to the stack — and produce a prioritized gap report. Walks Karpathy's 15-control digital security…

briiirussell

Cybersecurity Skills

ai-risk-management

Apply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems — model lifecycle governance, fairness and bias evaluation, robustness, transparency…

briiirussell

Cybersecurity Skills

csf-mapping

Map your security posture against the NIST Cybersecurity Framework 2.0 (Govern, Identify, Protect, Detect, Respond, Recover). Produce a gap analysis, current/target tier assessment, and…

briiirussell

Cybersecurity Skills

disk-forensics

Analyze disk images, file systems, and memory captures for digital evidence recovery in forensic investigations and CTF challenges. Use when the user mentions 'disk forensics,' 'forensic…

briiirussell

Cybersecurity Skills

osint-recon

Gather and correlate open source intelligence from public sources for authorized investigations, threat intelligence, and attack surface assessment. Use when the user mentions 'OSINT,'…

Pack51714kResearch

briiirussell

Cybersecurity Skills

recon

Perform structured reconnaissance and attack surface enumeration for authorized penetration tests, CTF challenges, and bug bounty programs. Use when the user mentions 'recon,'…