Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Use when planning, scoping, or executing a comprehensive security assessment, penetration test, red team engagement, or security audit. Use when the user needs to coordinate multiple security testing activities, define assessment scope and rules of engagement, perform threat modeling, rate risk using CVSS, map…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Kubernetes Role-Based Access Control (RBAC) auditing systematically reviews roles, cluster roles, bindings, and service account permissions to identify overly permissive access, privilege escalation p.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Scan container images for vulnerabilities using Trivy, Grype, and cloud-native tools. Identify security issues in base images, packages, and configurations. Use when implementing container security, building secure images, or meeting compliance requirements.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Enforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper policy library.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement Kubernetes Pod Security Admission to enforce baseline and restricted security profiles at namespace level using built-in admission controller.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes and CI/CD pipelines. It addresses writing Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, testing policies in development, and integrating policy evaluation into deployment…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement eBPF-based runtime security observability and enforcement in Kubernetes clusters using Cilium Tetragon for kernel-level threat detection and policy enforcement.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Implement Kubernetes security contexts, Pod Security Standards, and network policies. Secure cluster components and workloads. Use when hardening Kubernetes deployments or meeting security compliance.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure production-ready images.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
This skill covers integrating Aqua Security's Trivy scanner into CI/CD pipelines for comprehensive container image vulnerability detection. It addresses scanning Docker images for OS package and application dependency CVEs, detecting misconfigurations in Dockerfiles, scanning filesystem and git repositories, and…
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent deploying unscanned or unsigned images.
Njones17/AI-agent-master-cyber-skills-list
Skill Claude CodeCodex
Harbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies, replicatio.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: