Kubernetes security policies are difficult to design without overgranting network or API access. This skill provides practical patterns for NetworkPolicy, RBAC, Pod Security Standards, and admission control.

Production incidents are difficult to diagnose across logs, code, dependencies, and systems. This skill structures investigation, repair, verification, rollout, and prevention across specialized AI agents.

Production incidents demand fast, coordinated decisions across technical and business teams. This skill structures triage, mitigation, investigation, communication, recovery, and postmortem work.

Service incidents require fast decisions, clear ownership, and reliable communication. This skill structures triage, investigation, recovery, validation, and post-incident learning.

IDOR flaws expose user data when object references lack ownership checks. This skill guides authorized testers through controlled detection, proof collection, and remediation planning.

Object references can expose or modify another user's resources when authorization checks fail. This skill structures authorized testing, evidence collection, impact analysis, and remediation.

Unsanitized input can alter pages, mislead users, and expose credentials. This skill guides authorized HTML injection testing, impact assessment, and remediation reporting.

Client-side vulnerabilities can expose users through unsafe rendering, navigation, and browser integrations. This skill provides practical guidance for secure frontend implementation and verification.

Unsafe client-side rendering can expose users to script injection. This skill reviews common frontend sinks and provides prioritized remediation guidance.

Security fixes can miss root causes or introduce regressions. This skill guides Claude, Codex, or Claude Code through structured fix validation.

Firmware reviews often require many tools and careful evidence handling. This skill guides authorized extraction, emulation, vulnerability review, and reporting.

Branch changes can hide regressions and security flaws. This skill guides Claude, Codex, and Claude Code through a structured review.

Path traversal bugs can expose server files and credentials. This skill gives authorized testers a structured workflow for finding, proving, and reporting them.

Path traversal bugs can expose server files and credentials. This skill guides authorized testers through discovery, validation, impact assessment, and remediation.

Web testers need focused ffuf guidance when planning directory, parameter, or virtual host fuzzing. This skill gives Claude, Codex, and Claude Code a simple workflow for web fuzzing discussions.

Security teams need a repeatable method for authorized assessments. This skill organizes reconnaissance, scanning, exploitation evidence, and reporting into one workflow.

Dependency risks are difficult to prioritize across vulnerabilities, licenses, maintenance, and supply chain signals. This skill organizes evidence and produces practical remediation and monitoring plans.

Web applications can reflect unsafe input and expose users to client-side attacks. This skill helps authorized testers plan XSS checks, classify findings, and document remediation.

Dependency risk is hard to prioritize across vulnerabilities, licenses, updates, and supply chain signals. This skill guides Claude, Codex, and Claude Code through structured audits and remediation plans.

Cloud teams need a structured way to test AWS, Azure, and GCP exposure. This skill organizes authorized cloud assessment steps, resource enumeration, and remediation-focused reporting.