Security & Testing Agent Skills

LimaCharlie Sensor Manager

Manages, deploys, and troubleshoots LimaCharlie endpoint sensors across Windows, macOS, and Linux platforms for real-time EDR telemetry.

LimaCharlie API Integrator

Integrate with the LimaCharlie SecOps platform using REST APIs, Python SDK, or Go SDK for programmatic sensor management and data streaming.

LimaCharlie Threat Intel Integrator

Integrates real-time threat intelligence feeds and API-based lookups into LimaCharlie security operations and detection rules.

Vault Operations

Automates HashiCorp Vault administration, secret management, and secure identity-based access control.

Keycloak IAM Manager

Manages Keycloak identity and access systems including realms, clients, authentication flows, and user federation.

LimaCharlie Telemetry Onboarding

Orchestrates step-by-step connections for cloud logs, SaaS applications, and third-party telemetry into the LimaCharlie SecOps platform.

Python Code Review Expert

Performs deep, context-aware Python code reviews on changed files to identify security vulnerabilities, performance bottlenecks, and architectural issues.

Cloud Security Exploitation

Identifies and exploits security misconfigurations across AWS, Azure, and GCP environments to harden cloud infrastructure.

Rust Error Handling Advisor

Analyzes Rust code to implement idiomatic error handling using Result types, context propagation, and custom error enums.

Debugging

Guides developers through a systematic, hypothesis-driven investigation to identify and resolve software bugs, performance issues, and logic errors.

Precommit Build Validator

Validates code changes by running precommit checks, automated builds, and battery-aware test suites.

Web3 & Smart Contract Security

Audits and identifies vulnerabilities in smart contracts and Web3 applications using expert penetration testing techniques.

Testing Guidelines

Enforces rigorous testing standards including strict assertions, minimal mocking, and clear naming conventions for high-quality test suites.

Web Application Security Testing

Equips Claude with expert penetration testing methodologies and specialized payloads to identify and exploit web application vulnerabilities.

Python Development Best Practices

Standardizes Python development workflows by providing expert guidance on coding standards, testing, and documentation.

Wireless Attack & Security Testing

Automates and guides wireless network security assessments, including WPA/WPA2 cracking, WPS exploitation, and Evil Twin attacks.

Initial Access Recon

Automates reconnaissance and intelligence gathering for offensive security assessments and attack surface mapping.

Phishing and Social Engineering Toolkit

Conducts authorized social engineering assessments, phishing simulations, and credential harvesting to test organizational security awareness.

Establishing Persistence Techniques

Implements and detects various methods for maintaining long-term access to compromised Windows, Linux, and cloud environments during security engagements.

Active Directory Attack Toolkit

Conducts professional Active Directory penetration testing and security assessments using industry-standard tools and methodologies.

Security File Transfer Techniques

Facilitates advanced file transfers and data exfiltration across Linux and Windows using diverse protocols and living-off-the-land techniques.

Mobile App Pentesting

Conducts comprehensive security audits and penetration testing for Android and iOS mobile applications.

Container Security & Escape Expert

Conducts deep security assessments and penetration tests for Docker and Kubernetes environments to identify and exploit vulnerabilities.

API Security Testing

Conducts comprehensive security audits and penetration tests on REST and GraphQL APIs to identify vulnerabilities like IDOR, injection, and authorization flaws.

Linux Privilege Escalation

Identifies and exploits Linux privilege escalation vectors including SUID binaries, sudo misconfigurations, and kernel vulnerabilities.

Password Attacks & Credential Cracking

Conducts professional password hash cracking, credential spraying, and authentication brute-force attacks using industry-standard tools.

Windows Privilege Escalation Expert

Provides expert guidance and automated command patterns for escalating privileges on Windows systems during security audits.

Network Service Enumeration

Performs professional-grade discovery, enumeration, and security assessment of network services and database protocols.

QA Security Scan

Conducts comprehensive security audits and vulnerability assessments using OWASP-aligned checklists and automated scanning integrations.

Ruby Community Style

Implements idiomatic Ruby patterns and strict structural guidelines based on the RuboCop Community Ruby Style Guide and Sandi Metz rules.