Njones17/AI-agent-master-cyber-skills-list
Instructions file
Claude Code instructions for Njones17/AI-agent-master-cyber-skills-list, covering claude.md — master cybersecurity skills, core mindset, analyst mindset — reporting & research, core principles and research standards.
Njones17/AI-agent-master-cyber-skills-list
Hook
Runs after a tool call finishes for Bash tool calls, executing capture-evidence.sh. From Njones17/AI-agent-master-cyber-skills-list.
Njones17/AI-agent-master-cyber-skills-list
Hook
Runs before the agent uses a tool for Bash tool calls, executing scope-guard.sh and danger-check.sh (2 commands). From Njones17/AI-agent-master-cyber-skills-list.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Run structured AI red team exercises for jailbreak resistance, data exfiltration risk, harmful output controls, and agent tool abuse resilience.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks. Covers input validation, output filtering, access control, model API security, and compliance controls for production AI systems.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "codeql analysis", "build codeql database", or "find vulnerabilities with codeql". Supports "run all" (security-and-quality suite) and "important only"…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Perform dynamic application security testing with OWASP ZAP, Burp Suite, and Nikto. Test running applications for security vulnerabilities through automated and manual testing. Use when testing web applications, APIs, or performing penetration testing.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Use when assessing security for Python FastAPI applications. Focuses on Pydantic exploitation, dependency injection gaps, OpenAPI exposure, ASGI middleware security, and Python-specific vulnerabilities like template injection and SSRF.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration, parameter fuzzing, authenticated fuzzing with raw requests, auto-calibration, and result analysis. Use when running ffuf scans, analyzing ffuf output, or building fuzzing strategies for web…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. Use when analyzing APK files for Firebase vulnerabilities, performing mobile app security audits, or testing Firebase endpoint security. For authorized security…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Security assessment methodology for Google Firebase applications, covering Firestore, Realtime Database, Cloud Storage, and Cloud Functions.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence for each bug.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Starts and controls the reaper MITM proxy to capture, inspect, search, and replay HTTP/HTTPS traffic between clients and servers. Capabilities include starting/stopping the proxy scoped to specific domains, viewing captured request/response logs, searching traffic by method/path/status/host, and inspecting full raw…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Scans directory structure, detects projects, maps dependencies, and documents code organization into a repo.md file. Use when the user needs a codebase overview, project structure map, or repository context before security analysis.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Ghost Security - SAST code scanner. Finds security vulnerabilities in source code by planning and executing targeted scans for issues like SQL injection, XSS, BOLA, BFLA, SSRF, and other OWASP categories. Supports applications (backend, frontend, mobile) and libraries (prototype pollution, unsafe deserialization…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Ghost Security - Software Composition Analysis (SCA) scanner. Scans dependency lockfiles for known vulnerabilities, identifies CVEs, and generates findings with severity levels and remediation guidance. Use when the user asks about dependency vulnerabilities, vulnerable packages, CVE checks, security audits of…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcoded API keys or…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a vulnerability", "determine if a finding is a true positive or false positive", or provides a security finding for review. It validates security vulnerability findings by…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Use when testing GraphQL APIs for common vulnerabilities including introspection exploitation, authorization bypasses, batching abuse, and denial of service. Covers endpoint discovery, schema analysis, and exploitation of GraphQL-specific features like federation and directives.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and credential stuffing attacks.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implements security controls at the API gateway layer including authentication enforcement, rate limiting, request validation, IP allowlisting, TLS termination, and threat protection. The engineer configures API gateways (Kong, AWS API Gateway, Azure APIM, Apigee) to act as a centralized security enforcement point…