Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implements API rate limiting and throttling controls using token bucket, sliding window, and fixed window algorithms to protect against brute force attacks, credential stuffing, resource exhaustion, and API abuse. The engineer configures per-user, per-IP, and per-endpoint rate limits using Redis-backed counters, API…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement API schema validation using OpenAPI specifications and JSON Schema to enforce input/output contracts and prevent injection, data exposure, and mass assignment attacks.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement API Security Posture Management to continuously discover, classify, and score APIs based on risk while enforcing security policies across the API lifecycle.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement comprehensive API security testing using the 42Crunch platform to perform static audit and dynamic conformance scanning of OpenAPI specifications.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement API threat protection using Google Apigee policies including JSON/XML threat protection, OAuth 2.0, SpikeArrest, and Advanced API Security for OWASP Top 10 defense.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD pipelines. It addresses configuring baseline, full, and API scans against running applications, interpreting ZAP findings, tuning scan policies, and establishing DAST quality gates in GitHub Actions and GitLab…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines. It addresses configuring automated code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results to GitHub Advanced Security, and…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Secure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and trusted model promotion.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Comprehensive security testing for Next.js applications, covering App Router, RSC, Server Actions, and common deployment misconfigurations.
Njones17/AI-agent-master-cyber-skills-list
Skill Codex
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not…
Njones17/AI-agent-master-cyber-skills-list
Skill Codex
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for…
Njones17/AI-agent-master-cyber-skills-list
Skill Codex
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling.…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Uses Microsoft RESTler to perform stateful REST API fuzzing by automatically generating and executing test sequences that exercise API endpoints, discover producer-consumer dependencies between requests, and find security and reliability bugs. The tester compiles an OpenAPI specification into a RESTler fuzzing…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Tests API rate limiting implementations for bypass vulnerabilities by manipulating request headers, IP addresses, HTTP methods, API versions, and encoding schemes to circumvent request throttling controls. The tester identifies rate limit headers, determines enforcement mechanisms, and attempts bypasses including…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Assessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized security tests.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Performs OAuth 2.0 scope minimization review to identify over-permissioned third-party application integrations, excessive API scopes, unused token grants, and risky OAuth consent patterns across identity providers and SaaS platforms. Activates for requests involving OAuth scope audit, API permission review…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source dependencies in CI/CD pipelines. It addresses scanning package manifests and lockfiles, automated fix pull request generation, license compliance checking, continuous monitoring of deployed applications, and…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Auditing HTTP security headers including CSP, HSTS, X-Frame-Options, and cookie attributes to identify missing or misconfigured browser-level protections.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Performing security reviews of serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions to identify overly permissive execution roles, insecure environment variables, injection vulnerabilities, and missing runtime protections.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Perform security testing of SOAP web services by analyzing WSDL definitions and testing for XML injection, XXE, WS-Security bypass, and SOAPAction spoofing.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: