Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Audit Active Directory, LDAP, and enterprise identity infrastructure for misconfigurations, privilege escalation paths, Kerberos weaknesses, trust relationship abuse, and credential exposure.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
API-specific security testing for REST, GraphQL, WebSocket, and gRPC endpoints. Covers authentication, authorization, injection, rate limiting, mass assignment, and API-specific attack patterns.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Intake, deduplication, severity assignment, and prioritization of security findings for bug bounty and pentest engagements. Processes raw findings into actionable triaged items.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Audit CI/CD pipelines and software supply chains for poisoning vectors, secret exposure, artifact tampering, dependency confusion, and build environment compromise. Covers GitHub Actions, GitLab CI, Jenkins, and container build pipelines.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Audit cloud infrastructure configuration for security misconfigurations across AWS, Azure, and GCP. Covers IAM, storage, networking, compute, and logging. Reviews IaC templates (Terraform, CloudFormation, Pulumi).
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Assess container runtime security including escape paths, kernel exploitation, capability abuse, namespace breakouts, and orchestration runtime issues beyond static configuration review.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Audit third-party dependencies for known vulnerabilities and detect hardcoded secrets, API keys, and credentials in source code, configuration, and git history.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Compile, format, and generate security assessment reports from triaged findings. Produces consistent, professional reports with executive summaries, finding details, remediation guidance, and validation notes.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Develop and execute proof-of-concept exploits to validate suspected vulnerabilities. Confirms exploitability, measures real impact, and produces reproducible evidence for confirmed findings.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Deep reconnaissance review and attack surface mapping. Analyzes gathered recon data to identify exposed services, entry points, technology stacks, and potential attack vectors.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Security and safety assessment for LLM applications, AI agents, and AI-integrated systems. Covers OWASP LLM Top 10 2025, prompt injection, jailbreaking, training data attacks, model extraction, AI plugin abuse, agentic system risks, and AI red teaming methodology.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Security assessment of iOS and Android mobile applications. Covers OWASP Mobile Top 10, reverse engineering, runtime manipulation, data storage, network security, certificate pinning bypass, and platform-specific attack patterns.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Network-layer security assessment covering segmentation validation, service enumeration, firewall rule analysis, protocol attacks, and infrastructure exposure testing.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Source-level vulnerability hunting. Systematic review of application source code for injection flaws, auth bypasses, logic bugs, cryptographic weaknesses, and unsafe patterns. Operates on code files within the workspace.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Establishes engagement rules, authorization boundaries, and operational guardrails for all security review skills. Must be invoked before any assessment work begins.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Fast-path security audit of files changed since last commit. Runs automatically after every coding task. Scopes exclusively to git diff. Escalates to the full applicable skill if S1 or S2 findings are discovered.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Proactive threat identification using structured frameworks (STRIDE, PASTA). Models data flows, trust boundaries, and threat actors to prioritize security testing and contextualize findings with business risk.
Samurai-goose/SPECTER-The-Illusive-Security-Protocol
Skill Claude CodeCodex
Review web server, application, and infrastructure configuration for security misconfigurations. Covers headers, TLS, CORS, error handling, directory exposure, and deployment hygiene.