Skill UI

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

This expert provides advanced, practical knowledge across the entire lifecycle of containerized applications. Core expertise includes multi-stage Dockerfile optimization, container security hardening (non-root users, minimal attack surface), and advanced orchestration using patterns like Docker Compose. Ideal for ensuring robust, secure, and production-ready deployments.

This comprehensive guide outlines essential security best practices for implementing and using Lindy AI agents. It covers crucial topics such as robust API key management, webhook signature verification, strict agent permission scoping, and secure data handling protocols. Use this resource when auditing agent activity, configuring enterprise security features (SSO/SCIM), or ensuring compliance and minimizing the attack surface area of autonomous AI systems.

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

Guides security pros through WordPress 7.0 attack surfaces covering discovery, enumeration, vulnerability scanning, credential checks, and exploitation with WPScan, Burp, Metasploit, and manual curl probes for authorized assessments.

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.

This tool systematically audits a project's dependencies to identify potential supply chain security risks. It evaluates critical factors such as maintenance status, contributor count, popularity, and the presence of high-risk features. It is ideal for pre-security audits, assessing the overall attack surface, and mitigating risks before deployment.

Parse Windows Prefetch files with windowsprefetch to rebuild execution timelines, flag renamed binaries, and surface suspicious programs for incident responders hunting attacker activity.

Conducts passive OSINT reconnaissance to map an organization’s external attack surface, harvesting DNS, certificate, cloud, personnel, and leak intelligence before active penetration testing or red team work.

Detects undocumented API endpoints by comparing traffic logs with OpenAPI specs, sweeping codebases, and using discovery tools so teams can inventory shadow APIs, validate monitoring rules, and shore up attack surface controls.

Guides applying CIS Docker Benchmark best practices across daemon, image, runtime, and host auditing so teams can minimize attack surface, enforce least privilege, and verify secure production deployments.