jaskaranhundal

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Pipeline Security Scan. Use for CI/CD pipeline security scanning — secrets in env vars, SAST integration, artifact signing check.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for SAST/DAST Coordinator. Orchestrate static and dynamic application security testing, correlate findings across tools, deduplicate results, and prioritize by exploitability.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Secure SDLC. Embed security into every phase of development — design, coding, testing, deployment, and operations — with developer-friendly controls.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Security Requirements Review. Use for proactive analysis of design documents — POA&M, PRDs, architecture docs, requirements specs — to extract security gaps before any alerts fire.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Supply Chain Risk. Evaluate software and hardware supply chain dependencies, detect malicious package injection, and assess build pipeline integrity.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Supply Chain Simulation. Design and analyze supply chain attack scenarios in isolated environments to test detection coverage and response capabilities.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for application threat modeling. Use for building a STRIDE+DREAD threat model from a target spec, generating a structured THREATMODEL.md artifact, and seeding the downstream vuln-scan + finding-triage chain with a prioritized asset and trust-boundary inventory.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for threat-model-scoped vulnerability scanning. Use for running static analysis (SAST, secrets, dependency vuln) against a target the threat-model skill has already mapped, weighting findings by their proximity to the model's top-DREAD threats, and emitting structured VULN-FINDINGS.json for downstream…

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Cloud Security Posture. Use for Evaluate cloud misconfigurations and posture drift.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Cloud Workload Protection. Use for Container and serverless runtime security — anomaly detection, escape detection, CSPM gap analysis.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Container Image Scan. Use for classifying container-image vulnerability scan findings from Trivy, Grype, or Snyk into a block-deploy, fix-by-SLA-window, track, or accept decision across base-image OS packages, application dependencies, and unexpected image layers.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Endpoint & OS Security. Analyze endpoint security posture, evaluate EDR coverage, detect configuration drift, and recommend hardening for Windows, Linux, macOS, and containers.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for IaC Security. Analyze Terraform, CloudFormation, Kubernetes manifests, and Helm charts for misconfigurations, insecure defaults, and compliance violations.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for OT/IoT/Device Security. Evaluate operational technology and IoT security controls, identify OT network segmentation gaps, and assess ICS/SCADA security posture.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Attack Surface Management. Use for Continuously discover and assess exposed assets.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Behavioral Analytics (UEBA). Use for Analyze behavioral anomalies across users and entities.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Deception & Honeypot Strategy. Use for Deception technology planning — honeypot placement, canary token deployment, lateral movement traps.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Detection Engineering. Design, validate, and tune detection rules across SIEM, EDR, and cloud telemetry to minimize dwell time and maximize detection fidelity.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Network Exposure. Use for Identify network segmentation and exposure weaknesses.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Secrets and Credential Exposure Detection. Use for scanning repositories, pipelines, and runtime environments for exposed secrets, API keys, tokens, and credentials — includes entropy analysis, blast-radius estimation, and revocation prioritization.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Telemetry and Signal Quality Assessment. Use for evaluating SIEM data source health, log completeness, normalization error rates, and detection data fidelity before running threat hunts or drawing conclusions from negative detection results.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Threat Hunting. Use for Perform hypothesis-driven threat hunting across telemetry.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Threat Intelligence Enrichment and Attribution. Use for IOC enrichment, adversary TTP mapping to MITRE ATT&CK, threat actor attribution, intelligence-driven detection prioritization, and converting raw indicators into actionable detection or control recommendations.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for CISO Brief Generator. Use for generating CISO-level security briefs — risk posture summaries, board-ready narratives.