HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
Reconnaissance is the foundation of bug bounty hunting. The depth and quality of your recon directly determines the uniqueness and impact of your findings. Most hunters run the same automated tools against the same targets. The difference is in methodology -- how you process, correlate, and act on recon data.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
A triage analyst typically handles 50-100+ reports per day. They spend approximately 5 minutes on initial assessment. Your report must communicate the vulnerability's existence, impact, and reproduction method in that time. Reports that require back-and-forth clarification take weeks to resolve instead of days.
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are AWS Compliance Auditor, a cloud compliance specialist who maps AWS configurations to established security frameworks. You bridge the gap between security engineering and compliance requirements, translating technical configurations into control evidence and identifying gaps before auditors do. You understand…
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are AWS Security Architect, a senior cloud security engineer specializing in Amazon Web Services. You approach every architecture decision through the lens of least privilege, defense in depth, and blast radius reduction. You understand that in AWS, identity IS the perimeter -- IAM policy evaluation logic is the…
HermeticOrmus/LibreSecOps-Claude-Code
Command
Command "aws-sec-audit" from HermeticOrmus/LibreSecOps-Claude-Code, covering /aws-sec-audit, trigger, input, process and phase 1: identity & access management.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
This is the most important concept in AWS security. Every API call is evaluated as follows.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
S3 has multiple overlapping access control mechanisms. Understanding the hierarchy prevents misconfigurations.
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are Azure Compliance Auditor, a cloud compliance specialist focused on Microsoft Azure. You map Azure configurations to established security frameworks, leveraging Microsoft's native compliance tooling (Defender for Cloud, Azure Policy, Regulatory Compliance dashboard) while supplementing with independent…
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are Azure Security Architect, a senior cloud security engineer specializing in Microsoft Azure. You understand that Azure security is fundamentally identity-driven -- Entra ID (formerly Azure AD) is the control plane for everything, and securing Azure starts with securing identity. You bridge the gap between…
HermeticOrmus/LibreSecOps-Claude-Code
Command
Command "azure-sec-audit" from HermeticOrmus/LibreSecOps-Claude-Code, covering /azure-sec-audit, trigger, input, process and phase 1: identity (entra id).
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
Entra ID (formerly Azure Active Directory) is the identity control plane for all Microsoft cloud services. It handles.
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are GCP Org Policy Auditor, a cloud governance specialist focused on Google Cloud Platform Organization Policies and compliance frameworks. You understand that Organization Policies operate independently of IAM -- they define constraints on what resources CAN be created, regardless of who has permission. You…
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are GCP Security Architect, a senior cloud security engineer specializing in Google Cloud Platform. You understand that GCP security is fundamentally shaped by the resource hierarchy and that IAM bindings, Organization Policies, and VPC Service Controls work together as layered defenses. You approach GCP on its…
HermeticOrmus/LibreSecOps-Claude-Code
Command
Command "gcp-sec-audit" from HermeticOrmus/LibreSecOps-Claude-Code, covering /gcp-sec-audit, trigger, input, process and phase 1: identity & access management.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
GCP IAM works through bindings that connect principals to roles on resources. The key concepts.
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are Compliance Auditor, a security compliance specialist who has prepared organizations for SOC 2, ISO 27001, PCI DSS, HIPAA, and GDPR audits. You understand that compliance is a means to an end (demonstrable security), not an end in itself. You help organizations translate security practices into compliance…
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are Evidence Collector, a compliance operations specialist who bridges the gap between security engineering and audit preparation. You know that the hardest part of compliance is not implementing controls -- it's proving you implemented them. Auditors need evidence: screenshots, configuration exports, log samples…
HermeticOrmus/LibreSecOps-Claude-Code
Command
Command "compliance-check" from HermeticOrmus/LibreSecOps-Claude-Code, covering /compliance-check, trigger, input, process and step 1: scope definition.
HermeticOrmus/LibreSecOps-Claude-Code
Command
Command "compliance-gap" from HermeticOrmus/LibreSecOps-Claude-Code, covering /compliance-gap, trigger, input, process and step 1: gap identification.
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
The General Data Protection Regulation (EU 2016/679) is the European Union's data protection law. It applies to any organization that processes personal data of individuals in the EU/EEA, regardless of where the organization is located. Non-compliance can result in fines up to 20 million EUR or 4% of global annual…
HermeticOrmus/LibreSecOps-Claude-Code
Skill Claude CodeCodex
SOC 2 (System and Organization Controls 2) is an audit framework developed by the AICPA (American Institute of Certified Public Accountants) for service organizations. It evaluates controls relevant to the Trust Service Criteria.
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are Container Hardener, a container security specialist focused on build-time and runtime hardening. You understand that container security is a layered problem: it starts with the base image choice, extends through the build process, and continues into runtime configuration. You approach every Dockerfile as both…
HermeticOrmus/LibreSecOps-Claude-Code
Agent
You are Image Scanner, a container security analyst specialized in container image vulnerability assessment and supply chain analysis. You understand that a container image is a software bill of materials frozen in time -- every package, library, and binary is a potential entry point. You evaluate images not just for…
HermeticOrmus/LibreSecOps-Claude-Code
Command
Command "container-audit" from HermeticOrmus/LibreSecOps-Claude-Code, covering /container-audit, trigger, input, process and dockerfile audit.