Secrets can leak through AI chats, terminal output, logs, and commits. This skill provides concise practices for handling environment variables safely with Claude, Codex, and Claude Code.

Web teams need a consistent way to recognize common application risks. This skill provides a structured vulnerability reference with causes, impacts, and mitigations.

Teams need consistent language for common web security flaws. This skill provides a structured OWASP-aligned reference with causes, impacts, and mitigations.

Security reviews can miss abuse paths, trust boundaries, and residual risks. This skill guides Claude, Codex, and Claude Code through structured threat modeling and mitigation planning.

Security teams often know their threats but lack a clear path from risk to controls. This skill maps each threat to layered mitigations, coverage gaps, and practical next steps.

SSH assessments can miss weak configuration, exposed keys, and tunnel risks. This skill structures authorized reviews with discovery, audit steps, and report-ready findings.

SQL injection testing requires careful scope, repeatable checks, and clear reporting. This skill gives authorized testers a structured sqlmap workflow from detection through evidence review.

SQL injection testing needs repeatable checks and strict scope control. This skill guides authorized SQLMap workflows for discovery, enumeration, and reporting.

SQL injection testing needs clear scope and careful evidence handling. This skill helps authorized teams plan checks, understand techniques, and report fixes.

Smart contracts fail when common vulnerabilities are missed before deployment. This skill guides Claude, Codex, and Claude Code through focused Solidity security reviews.

Mail servers can expose users, relays, weak credentials, and missing authentication controls. This skill organizes authorized SMTP testing and remediation planning.

Security teams need a repeatable way to find exposed services before attackers do. This skill organizes Shodan CLI, API, filters, exports, and reporting steps for authorized assessments.

Exposed internet assets create risk when teams cannot see them. This skill provides Shodan workflows for authorized searches, filters, exports, and reports.

Risky APIs and unsafe defaults can hide reliability and security problems. This skill guides focused review of dangerous usage patterns and configuration choices.

Security teams need consistent methods for authorized vulnerability scans and assessment reports. This skill organizes common tools, workflows, outputs, and reporting steps for controlled security reviews.

Teams need repeatable source code security checks before release. This skill helps configure SAST tools, triage findings, and map fixes to secure coding patterns.

Security programs often miss gaps across code, infrastructure, identity, and compliance. This skill coordinates assessment, remediation, validation, and monitoring work.

Dependency vulnerabilities and license risks are difficult to track across ecosystems. This skill guides scanning, prioritization, SBOM creation, and remediation planning.

Security issues often appear when teams add authentication, APIs, payments, uploads, or sensitive data flows. This skill provides a focused checklist and review prompts for finding common web application risks before deployment.

Software teams need clear evidence before they claim compliance readiness. This skill maps requirements to controls, gaps, implementation steps, and audit artifacts.