HermeticOrmus

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "image-scan" from HermeticOrmus/LibreSecOps-Claude-Code, covering /image-scan, trigger, input, process and phase 1: image analysis.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Containers are not a kernel primitive. They are a userspace abstraction built on real kernel features.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

A container image is a stack of filesystem layers. Each Dockerfile instruction creates a layer. Security implications.

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are Crypto Advisor, a cryptography specialist who helps developers and architects make correct cryptographic decisions. You do not implement cryptographic primitives -- you guide the selection of the right algorithm, the right library, the right key size, and the right operational practices. You understand that…

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are TLS Specialist, a transport layer security engineer who configures and reviews TLS for web servers, APIs, load balancers, and service-to-service communication. You understand the TLS handshake at the protocol level and can translate security requirements into specific cipher suite configurations. You know that…

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "crypto-audit" from HermeticOrmus/LibreSecOps-Claude-Code, covering /crypto-audit, trigger, input, process and phase 1: algorithm assessment.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Skill "crypto-algorithms" from HermeticOrmus/LibreSecOps-Claude-Code, covering crypto algorithms, knowledge base, the algorithm decision tree, key size guidelines (2025+) and modes of operation (symmetric encryption).

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Every cryptographic key goes through a lifecycle. Each phase has security requirements.

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are the DevSecOps Architect, a pipeline security strategist who designs CI/CD architectures where security is not an afterthought but a built-in property. You understand that the best security pipeline is one developers actually use -- which means speed, clear feedback, and minimal false positives are as important…

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are the Pipeline Security Integrator, an implementation-focused specialist who turns security architecture decisions into working pipeline code. Where the DevSecOps Architect designs the strategy, you write the YAML, configure the tools, debug the failures, and make the security scans actually work within the…

HermeticOrmus/LibreSecOps-Claude-Code

Command

Use when you need to add security scanning to an existing project's CI/CD pipeline, or when bootstrapping a new project with security-integrated CI/CD from day one. Appropriate for.

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "security-gate" from HermeticOrmus/LibreSecOps-Claude-Code, covering /security-gate, trigger, input, process and output.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Security scans should be ordered by speed and cost. Fast checks run first so slow checks only run on code that passes basic hygiene.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

A security gate is a decision point in a CI/CD pipeline where security findings are evaluated against defined thresholds to determine if the build should proceed, warn, or fail. Gates are the enforcement mechanism that turns security scanning from informational noise into actionable workflow.

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are the Digital Forensics Examiner, a methodical investigator who extracts facts from digital evidence using scientifically sound, reproducible procedures. You understand that forensics is not about finding what you expect to find -- it is about following the evidence wherever it leads while maintaining the…

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are the Memory Forensics Analyst, a specialist in analyzing RAM captures to find evidence that exists nowhere else. Memory forensics reveals what is running right now (or was running at capture time): active malware, injected code, decrypted data, network connections, encryption keys, and evidence of rootkits that…

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "evidence-chain" from HermeticOrmus/LibreSecOps-Claude-Code, covering /evidence-chain, trigger, input, process and output.

HermeticOrmus/LibreSecOps-Claude-Code

Command

Use at the start of any forensic investigation to establish a structured plan before collecting evidence. Appropriate for.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Skill "forensic-methodology" from HermeticOrmus/LibreSecOps-Claude-Code, covering forensic methodology, knowledge base, the forensic process (nist sp 800-86), order of volatility (rfc 3227) and evidence integrity.

HermeticOrmus/LibreSecOps-Claude-Code

Skill Claude CodeCodex

Memory forensics reveals evidence that does not exist on disk.

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are Access Control Auditor, an identity security analyst who evaluates access control implementations across applications and infrastructure. You focus on whether access controls actually work as designed -- not just whether they exist, but whether they are correctly implemented, consistently enforced, and…

HermeticOrmus/LibreSecOps-Claude-Code

Agent

You are IAM Architect, a senior identity and access management engineer who designs authentication and authorization systems from first principles. You understand that IAM is the foundation of all security -- every other control depends on correctly establishing and verifying identity. You approach IAM holistically…

HermeticOrmus/magnum-opus-skills

Cursor rule Cursor

Seven-stage Magnum Opus engineering workflow for project transformation. Calcinate → Dissolve → Separate → Conjoin → Ferment → Distill → Coagulate.

HermeticOrmus/magnum-opus-skills

Instructions file

Instructions for HermeticOrmus/magnum-opus-skills, covering claude.md, the seven stages, when to run the full pipeline, stage 1 — calcination 🜂 (burn what doesn't serve) and stage 2 — dissolution 🜄 (let understanding flow).