Skill UI

This skill functions as a specialized dependency security expert. It analyzes project dependencies to identify critical security vulnerabilities, licensing compliance issues, and outdated packages. It provides comprehensive, actionable remediation strategies to strengthen supply chain security.

Provides a vulnerability exception and risk acceptance tracker with approval workflows, compensating controls documentation, notifications, and expiration management to keep accepted risks visible for compliance teams.

Guide to using the Metasploit Framework to validate and exploit verified vulnerabilities, document impact, scan auxiliary vectors, and confirm patches within a risk-based vulnerability management cycle.

Implements multi-cloud CSPM by wiring AWS Security Hub, Azure Defender for Cloud, and tools like Prowler and ScoutSuite to detect misconfigurations and posture risks.

Automate Greenbone/OpenVAS vulnerability management via the python-gvm GMP API: connect securely, create scan targets and tasks, execute scans, parse XML reports, and emit JSON summaries for compliance-aware security operations.

Defines and operationalizes vulnerability remediation SLAs so teams patch or mitigate issues within severity-based timeframes, align escalation and exception workflows, and report KPIs to demonstrate continuous improvement in vulnerability management.

Performs sector-specific threat landscape assessments by analyzing targeting patterns, attack vectors, TTPs, and vulnerability trends so security teams can prioritize risk management, investment, and reporting for verticals such as finance, healthcare, energy, and government.

Guide to configure and run Nessus scans across servers, workstations, and network devices, covering policy creation, credentialed and unauthenticated checks, REST automation, and result analysis for continual vulnerability management.

Provides practical strategies for managing Go module dependencies, from go.mod/go.sum hygiene and version upgrades to vendoring, vulnerability scanning, and automated updates, ensuring stability during additions, removals, audits, and workspace work.

A comprehensive guide and set of tools for performing deep security audits and implementing secure coding practices in Golang. It covers threat modeling (STRIDE), data flow tracing, input validation, cryptography, secrets management, and vulnerability prevention for critical areas like SQL injection and authentication.

This skill provides a comprehensive framework for conducting high-quality code reviews. It guides developers through checking code across four critical dimensions: Correctness (functional accuracy and edge cases), Maintainability (readability and documentation), Performance (efficiency and resource usage), and Security (input validation and vulnerability management). It also emphasizes providing actionable, constructive, and empathetic feedback.