Skill UI

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

This skill allows users to build comprehensive attack trees to systematically visualize complex threat paths. It is essential for mapping potential attack scenarios, identifying critical defense gaps, prioritizing security investments, and communicating detailed security risks to non-technical stakeholders.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

A comprehensive guide detailing red team tactics based on the MITRE ATT&CK framework. It covers the entire adversary lifecycle, including reconnaissance, initial access, privilege escalation, defense evasion, lateral movement, and exfiltration. This skill is designed for authorized security assessments to simulate real-world threats and identify critical defensive gaps.

Security workflow that guides from threat modeling through secure design, authentication and input validation, header hardening, encryption, and OWASP defenses for production services.

Comprehensive checklist for application security hardening, covering input validation, output encoding, SQL/CSRF defenses, security headers, JWT best practices, secrets handling, rate limiting, and dependency audits to keep web services resilient.

This skill implements a robust, multi-layered security hardening process based on the Defense-in-Depth strategy and DevSecOps principles. It coordinates specialized agents to perform comprehensive security assessments (SAST, DAST, SBOM, Threat Modeling), identify critical vulnerabilities, and execute layered remediation. The process covers application code, backend APIs, frontend components, and mobile platforms, ensuring a resilient security posture across the entire development lifecycle.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

Guides growth-stage companies through CISO-level security programs by quantifying risks in dollars, sequencing compliance (SOC 2/ISO 27001/HIPAA/GDPR), architecting zero-trust defenses, leading incident response, and translating budgets for boards or sales conversations.

A senior criminal lawyer specializing in Brazilian criminal and procedural law. Expertise covers domestic violence (Maria da Penha Law), feminicide, and criminal defense/prosecution strategies. Provides structured legal analysis, advice, and procedural workflows for victims, accused parties, and legal professionals.