Skill UI

Expert security auditor for DevSecOps, application security, and compliance. Performs threat modeling, vulnerability assessment, secure code review, and CI/CD security integration to build resilient, compliant systems.

This skill enables comprehensive security assessments of SSH services. It covers enumeration, credential attacks, vulnerability exploitation, and configuration auditing using tools like Nmap, Hydra, and Metasploit. Suitable for authorized penetration testing and security research to identify weaknesses in SSH implementations.

This skill enables comprehensive software supply chain security assessment, covering SBOM generation, SCA scanning, CI/CD pipeline review, and container image auditing. It involves verifying build integrity, dependency provenance, and vulnerability reachability. Key activities include auditing upstream repositories, integrating security gates in CI/CD, ensuring artifact integrity, and monitoring CVEs for actual exploitability to mitigate supply chain attacks.