Network investigations require fast packet filtering, protocol inspection, and careful evidence handling. This skill guides authorized TShark workflows for capture analysis, forensic extraction, and incident response reporting.

Web server misconfigurations and outdated components are hard to review consistently. This skill guides authorized Nikto scans, result handling, and remediation-focused reporting.

Open source dependencies can introduce vulnerabilities, license obligations, and supply chain risk. This skill helps Claude, Codex, and Claude Code run Black Duck-centered SCA workflows with practical remediation guidance.

Security teams need repeatable workflows for reviews, rules, and CI security checks. This skill provides reusable templates for AppSec, DevSecOps, compliance, and incident response work.

API teams need controlled visibility into encrypted client traffic. This skill guides mitmproxy setup, capture, replay, and reporting for authorized security testing.

Custom agent roles are hard to configure safely because Codex config files have strict supported keys. This skill collects required inputs, writes role configs, registers them, and validates the result.

Hardcoded credentials can enter repositories through commits, examples, and configuration files. This skill helps teams add Gitleaks scanning, CI gates, baselines, and remediation workflows.

Teams need a repeatable way to find vulnerable packages, unsafe images, and IaC misconfigurations before release. This skill guides Claude, Codex, and Claude Code through Trivy scans, SBOM output, CI gates, and remediation planning.

Security teams need consistent static analysis across mixed-language repositories. This skill guides Horusec scans, CI integration, secret detection, report review, and false positive handling.

Python teams need fast security checks before code reaches production. This skill guides Claude, Codex, and Claude Code through Bandit scans, prioritization, and remediation planning.

Security findings often reach developers too late in the review cycle. This skill helps configure reviewdog so scanner and linter results appear directly in pull requests.

Network teams need repeatable scans that stay within approved scope. This skill structures Nmap discovery, enumeration, vulnerability checks, and reporting for authorized assessments.

Security teams need repeatable policy checks across Kubernetes, infrastructure, and compliance workflows. This skill provides OPA and Rego guidance, templates, and CI examples for consistent validation.

Security teams need repeatable workflows for authorized vulnerability validation without losing scope discipline. This skill guides Metasploit planning, execution notes, and defensive reporting for controlled assessments.

Security teams need clear review of netcat workflows before using them in controlled environments. This skill explains network testing patterns, but its offensive shell and exfiltration guidance makes it unsafe for open marketplace publishing.

Incident responders need fast endpoint visibility during active investigations. This skill provides Velociraptor VQL patterns, collector guidance, and hunt templates for authorized forensic work.

Infrastructure teams need to catch cloud misconfigurations before they reach production. This skill guides Checkov scans, compliance mapping, CI gates, suppressions, and remediation reporting.

Incident responders need fast endpoint evidence without switching between many host tools. This skill guides Claude, Codex, and Claude Code through osquery-based triage, hunting, and monitoring workflows.

Web teams need repeatable runtime security checks before releases. This skill guides authorized OWASP ZAP scans, authenticated testing, CI setup, and report review.

Security teams need fast checks for known vulnerabilities without building every test from scratch. This skill helps Claude, Codex, and Claude Code guide authorized Nuclei scans, CI workflows, and result validation.