AWS attack paths span many services and permissions. This skill organizes authorized enumeration, exploitation validation, evidence collection, and remediation planning.

Overly broad IAM access increases cloud security risk and complicates audits. This skill provides focused checks, policy guidance, and hardening steps for AWS identities.

AWS compliance reviews require many service checks across identity, logging, networking, and encryption. This skill provides structured AWS CLI and boto3 examples for common frameworks.

API reviews can miss authorization flaws, unsafe inputs, weak rate limits, and exposed errors. This skill organizes authorized REST and GraphQL testing into seven focused phases.

API flaws can expose data, bypass authorization, and disrupt services. This skill provides implementation patterns and review checklists for common API security controls.

API testers need repeatable checks for hidden endpoints, authorization flaws, and injection issues. This skill organizes API fuzzing workflows for authorized bug bounty and penetration testing.

API assessments can miss authorization, injection, and protocol-specific weaknesses. This skill organizes scoped tests for REST, SOAP, and GraphQL interfaces.

Protected binaries can obstruct legitimate debugging, malware analysis, and security research. This skill explains common defenses, analysis methods, bypass options, and documentation practices for authorized work.

Active Directory assessments require organized attack workflow references. This skill maps reconnaissance, credential abuse, Kerberos attacks, relay paths, and advanced AD techniques for authorized testing.

AI coding histories can retain credentials after they were shared with a model provider. This skill finds affected records while keeping reported secrets masked.

Security policies are difficult to convert into clear employee training. This skill creates a grounded, interactive PersonWise course from supplied materials.

Choosing execution services requires consistent evidence and comparable ratings. This skill provides a structured workflow for discovery, assessment, local memory, and optional review submission.

Identity setup errors can expose data, break sign-in, or grant excessive access. This skill guides Entra registration, OAuth selection, permissions, credentials, and MSAL integration.

Agent identity provisioning and OAuth token exchange require coordinated Microsoft Graph configuration. This skill provides workflows for Blueprints, per-instance identities, permissions, and sidecar deployment.

Selecting an Azure role with excessive permissions increases security risk. This skill recommends minimal roles and prepares Azure CLI and Bicep assignments.

Azure teams need a consistent way to identify compliance gaps and expiring Key Vault assets. This skill runs scoped assessments and produces prioritized remediation guidance.

AI coding sessions can accidentally run destructive git commands. This skill installs a Claude Code hook that stops high-risk git operations before execution.

Mailtrap API calls fail or leak secrets when teams mix tokens, headers, and account IDs. This skill gives Claude, Codex, and Claude Code a clear checklist for safe Mailtrap authorization.

CTF OSINT clues often span disconnected public sources and media artifacts. This skill organizes practical methods for authorized identity, geolocation, archive, DNS, and web research.

Automated browsers can expose inconsistent fingerprints that weaken test reliability. This skill measures those inconsistencies with liarjs and explains the failing checks.