Njones17/AI-agent-master-cyber-skills-list

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Kubernetes Role-Based Access Control (RBAC) auditing systematically reviews roles, cluster roles, bindings, and service account permissions to identify overly permissive access, privilege escalation p.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Scan container images for vulnerabilities using Trivy, Grype, and cloud-native tools. Identify security issues in base images, packages, and configurations. Use when implementing container security, building secure images, or meeting compliance requirements.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Enforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper policy library.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Implement Kubernetes Pod Security Admission to enforce baseline and restricted security profiles at namespace level using built-in admission controller.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes and CI/CD pipelines. It addresses writing Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, testing policies in development, and integrating policy evaluation into deployment…

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Implement eBPF-based runtime security observability and enforcement in Kubernetes clusters using Cilium Tetragon for kernel-level threat detection and policy enforcement.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Implement Kubernetes security contexts, Pod Security Standards, and network policies. Secure cluster components and workloads. Use when hardening Kubernetes deployments or meeting security compliance.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

This skill covers hardening container images by minimizing attack surface, removing unnecessary packages, implementing multi-stage builds, configuring non-root users, and applying CIS Docker Benchmark recommendations to produce secure production-ready images.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

This skill covers integrating Aqua Security's Trivy scanner into CI/CD pipelines for comprehensive container image vulnerability detection. It addresses scanning Docker images for OS package and application dependency CVEs, detecting misconfigurations in Dockerfiles, scanning filesystem and git repositories, and…

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent deploying unscanned or unsigned images.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Harbor is an open-source container registry that provides security features including vulnerability scanning (integrated Trivy), image signing (Notary/Cosign), RBAC, content trust policies, replicatio.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.

Njones17/AI-agent-master-cyber-skills-list

Skill Claude CodeCodex

This skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring. It addresses cloud-specific security features including IRSA for EKS, Workload Identity for…