a5c-ai/babysitter - الصفحة ٤١

aws-security-scanner

AWS security configuration scanning and hardening using Prowler, Security Hub, and AWS Config

لغة النص الأصلي: الإنجليزية

azure-security-scanner

Azure security configuration scanning and hardening using Azure Security Center, Azure Policy, and ScoutSuite

لغة النص الأصلي: الإنجليزية

compliance-evidence-collector

Automated evidence collection across compliance frameworks from cloud providers, identity systems, and security tools

لغة النص الأصلي: الإنجليزية

container-security-scanner

Container image and Kubernetes security scanning for CVEs, misconfigurations, and compliance

لغة النص الأصلي: الإنجليزية

crypto-analyzer

Cryptographic implementation analysis and validation for encryption algorithms, key sizes, and certificate management

لغة النص الأصلي: الإنجليزية

dast-scanner

Dynamic Application Security Testing execution and management. Configure and execute OWASP ZAP and Nuclei scans, run authenticated scanning, manage scan policies and scope, correlate findings with SAST results, and generate comprehensive vulnerability reports.

لغة النص الأصلي: الإنجليزية

gcp-security-scanner

GCP security configuration scanning and hardening using Security Command Center, Forseti, and ScoutSuite

لغة النص الأصلي: الإنجليزية

gdpr-compliance-automator

GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments

لغة النص الأصلي: الإنجليزية

git-forensics-scanner

Git diff forensics for surfacing and classifying code changes for trojan detection

لغة النص الأصلي: الإنجليزية

hipaa-compliance-automator

HIPAA security and privacy compliance automation for ePHI protection, safeguards assessment, and audit preparation

لغة النص الأصلي: الإنجليزية

homoglyph-detector

Byte-level Unicode homoglyph detection for identifying invisible character substitutions in code

لغة النص الأصلي: الإنجليزية

iac-security-scanner

Infrastructure as Code security scanning and policy enforcement for Terraform, CloudFormation, Kubernetes, and Pulumi

لغة النص الأصلي: الإنجليزية

key-management-orchestrator

Cryptographic key lifecycle management orchestration including generation, rotation, and destruction across key management systems

لغة النص الأصلي: الإنجليزية

multi-cloud-security-posture

Unified cloud security posture management across AWS, Azure, and GCP with normalized metrics and CIS benchmark comparison

لغة النص الأصلي: الإنجليزية

owasp-security-scanner

Automated OWASP Top 10 vulnerability detection and assessment. Run OWASP ZAP automated scans, detect injection vulnerabilities, identify broken authentication patterns, check for sensitive data exposure, analyze security misconfigurations, and generate…

لغة النص الأصلي: الإنجليزية

pci-dss-compliance-automator

PCI DSS compliance assessment and reporting for cardholder data protection, SAQ automation, and ASV scan orchestration

لغة النص الأصلي: الإنجليزية

phishing-simulation-skill

Phishing simulation campaign execution and analysis for security awareness assessment

لغة النص الأصلي: الإنجليزية

secret-detection-scanner

Detect secrets, credentials, and sensitive data in code and configurations. Scan git history for secrets, detect API keys, tokens, passwords, check environment files, monitor CI/CD logs for exposure, generate remediation steps, and track secret rotation…

لغة النص الأصلي: الإنجليزية

secure-coding-training-skill

Developer security training and assessment for secure coding practices and vulnerability prevention

لغة النص الأصلي: الإنجليزية

semantic-code-analyzer

LLM-powered semantic analysis of code diffs to detect business-logic trojans

لغة النص الأصلي: الإنجليزية

soc2-compliance-automator

SOC 2 Trust Services Criteria compliance automation for evidence collection, control mapping, and audit preparation

لغة النص الأصلي: الإنجليزية

vendor-risk-monitor

Continuous vendor security monitoring for security ratings, breach notifications, and risk change detection

لغة النص الأصلي: الإنجليزية

vendor-security-questionnaire

Automated vendor security assessment through questionnaire generation, response parsing, and risk scoring

لغة النص الأصلي: الإنجليزية

aiml-security

AI/ML model security testing and adversarial research capabilities. Generate adversarial examples, test model robustness, perform model extraction attacks, test for data poisoning, analyze model fairness, and support ART framework integration.

لغة النص الأصلي: الإنجليزية

binary-exploitation-skill

Advanced binary exploitation and mitigation bypass

لغة النص الأصلي: الإنجليزية

burp-suite-web-security-skill

Web application security testing with Burp Suite integration

لغة النص الأصلي: الإنجليزية

cloud-security-testing

Multi-cloud security assessment and penetration testing capabilities. Execute Prowler/ScoutSuite assessments, analyze IAM policies, identify cloud misconfigurations, test permissions, and enumerate cloud resources across AWS/GCP/Azure.

لغة النص الأصلي: الإنجليزية

cve-cwe-database-skill

CVE and CWE database querying and management

لغة النص الأصلي: الإنجليزية

debugger-integration-skill

Advanced debugging integration for vulnerability research

لغة النص الأصلي: الإنجليزية

fuzzing-operations-skill

Comprehensive fuzzing operations with AFL++, libFuzzer, and OSS-Fuzz integration

لغة النص الأصلي: الإنجليزية

ghidra-ida-reverse-engineering-skill

Deep integration with Ghidra and IDA Pro for binary analysis and reverse engineering

لغة النص الأصلي: الإنجليزية

hardware-security

Hardware and embedded security research capabilities. Interface with JTAG debuggers, analyze SPI/I2C communications, dump and analyze firmware, support fault injection, side-channel analysis, and hardware exploitation research.

لغة النص الأصلي: الإنجليزية

incident-forensics

Digital forensics and incident response capabilities. Analyze memory dumps with Volatility, parse filesystem artifacts, extract browser forensics, analyze Windows event logs, create forensic timelines, recover deleted files, and generate forensic reports.

لغة النص الأصلي: الإنجليزية

mitre-att-ck-skill

MITRE ATT&CK framework mapping and analysis

لغة النص الأصلي: الإنجليزية

mobile-security-testing-skill

Android and iOS application security testing

لغة النص الأصلي: الإنجليزية

offensive-security-skill

Offensive security tools and techniques integration

لغة النص الأصلي: الإنجليزية

network-protocol-analysis-skill

Network protocol capture, analysis, and fuzzing capabilities

لغة النص الأصلي: الإنجليزية

pwntools-exploitation-skill

Exploit development automation using pwntools framework

لغة النص الأصلي: الإنجليزية

security-sandbox

Isolated analysis environment management for malware and exploit testing. Create and manage isolated VMs, configure Cuckoo Sandbox, set up REMnux/FlareVM environments, manage Docker-based analysis containers, and capture filesystem and process changes.

لغة النص الأصلي: الإنجليزية

smart-contract-analysis-skill

Ethereum and blockchain smart contract security analysis

لغة النص الأصلي: الإنجليزية