sethdford/claude-skills - الصفحة ٨

certificate-management

Manage digital certificates for HTTPS, mutual TLS, code signing, and infrastructure security.

لغة النص الأصلي: الإنجليزية

cloud-security-posture

Assess and improve cloud infrastructure security posture through configuration review, access control, and compliance monitoring.

لغة النص الأصلي: الإنجليزية

container-security-review

Review container security including image scanning, runtime policies, and supply chain integrity.

لغة النص الأصلي: الإنجليزية

iam-policy-design

Design and implement least-privilege IAM policies for cloud and on-premise environments.

لغة النص الأصلي: الإنجليزية

infrastructure-hardening

Harden infrastructure through patch management, service hardening, and secure baselines.

لغة النص الأصلي: الإنجليزية

kubernetes-security

Secure Kubernetes clusters through RBAC, network policies, pod security, and runtime monitoring.

لغة النص الأصلي: الإنجليزية

network-segmentation

Design and implement network segmentation to limit lateral movement and contain breaches.

لغة النص الأصلي: الإنجليزية

zero-trust-architecture

Design and implement zero-trust architecture to authenticate and authorize all access, eliminating trust based on location.

لغة النص الأصلي: الإنجليزية

authentication-design

Design secure authentication systems with strong password policies, MFA, secure password reset, and session management.

لغة النص الأصلي: الإنجليزية

authorization-design

Design authorization systems (access control, role-based permissions, principle of least privilege) to enforce fine-grained access policies.

لغة النص الأصلي: الإنجليزية

cryptography-selection

Select appropriate cryptographic algorithms and parameters for encryption, hashing, key derivation, and digital signatures.

لغة النص الأصلي: الإنجليزية

input-validation-patterns

Design and implement input validation patterns (whitelisting, boundary checks, type validation) to prevent injection and buffer overflow attacks.

لغة النص الأصلي: الإنجليزية

output-encoding

Implement context-specific output encoding to prevent XSS and injection attacks. Encode HTML, URL, JavaScript, and other contexts appropriately.

لغة النص الأصلي: الإنجليزية

owasp-top-ten-check

Audit application architecture and code against OWASP Top 10 vulnerabilities. Use when assessing application security posture and prioritizing fixes.

لغة النص الأصلي: الإنجليزية

secrets-management

Manage API keys, credentials, and secrets securely using vaults, environment variables, and rotation policies. Prevent secrets from being committed to code or exposed in logs.

لغة النص الأصلي: الإنجليزية

secure-coding-review

Review code systematically for security vulnerabilities using OWASP Top 10, secure coding patterns, and static analysis best practices. Use when reviewing pull requests, conducting security code reviews, or implementing secure development practices.

لغة النص الأصلي: الإنجليزية

session-management

Implement secure session handling with proper token generation, storage, expiry, CSRF protection, and session invalidation.

لغة النص الأصلي: الإنجليزية

alert-triage

Triage security alerts to classify as true/false positives and prioritize investigation and response.

لغة النص الأصلي: الإنجليزية

detection-engineering

Build detection engineering capabilities including threat modeling, detection hypothesis development, and hypothesis testing.

لغة النص الأصلي: الإنجليزية

log-analysis-security

Analyze logs to investigate security incidents, identify attack patterns, and build detection rules.

لغة النص الأصلي: الإنجليزية

security-monitoring-strategy

Develop comprehensive security monitoring strategy covering detection sources, alert tuning, and operational resilience.

لغة النص الأصلي: الإنجليزية

siem-rule-design

Design SIEM (Security Information & Event Management) detection rules to identify suspicious activity and attacks.

لغة النص الأصلي: الإنجليزية

threat-intelligence-integration

Integrate threat intelligence into security operations to proactively detect and hunt threats.

لغة النص الأصلي: الإنجليزية

vulnerability-management-program

Establish vulnerability management program to identify, prioritize, remediate, and track vulnerabilities across infrastructure.

لغة النص الأصلي: الإنجليزية

bug-bounty-program

Establish and manage bug bounty programs to leverage external researchers for vulnerability discovery.

لغة النص الأصلي: الإنجليزية

red-team-exercise

Plan and execute red team exercises to test security controls and incident response capabilities.

لغة النص الأصلي: الإنجليزية

secure-architecture-review

Review system architecture and design for security flaws, compliance gaps, and architectural improvements.

لغة النص الأصلي: الإنجليزية

security-awareness-training

Develop and deliver security awareness training to build organizational security culture and reduce human risk.

لغة النص الأصلي: الإنجليزية

security-champion-program

Establish security champion program to embed security expertise across teams and improve security culture.

لغة النص الأصلي: الإنجليزية

security-documentation

Develop comprehensive security documentation including policies, procedures, architecture, and runbooks.

لغة النص الأصلي: الإنجليزية

security-metrics-dashboard

Create security metrics dashboards to track program effectiveness, trends, and KPIs for leadership reporting.

لغة النص الأصلي: الإنجليزية

abuse-case-design

Design abuse cases (negative use cases) showing how attackers misuse system features. Use when identifying attacks that exploit intended functionality or business logic flaws.

لغة النص الأصلي: الإنجليزية

asset-inventory

Create a comprehensive inventory of assets (data, systems, infrastructure, people) and their criticality, value, and dependencies. Use when prioritizing threats and allocating security resources.

لغة النص الأصلي: الإنجليزية

attack-tree-modeling

Build hierarchical attack trees showing how attackers decompose goals into sub-goals and exploits. Use when analyzing attack paths, prioritizing security investments, or assessing attacker effort and cost.

لغة النص الأصلي: الإنجليزية

data-flow-diagram-security

Create and analyze DFDs (Data Flow Diagrams) with security focus, identifying data flows across trust boundaries, storage, and processing points. Use when modeling system architecture for threat analysis.

لغة النص الأصلي: الإنجليزية

risk-scoring

Quantify risk using likelihood and impact, apply severity ratings, and prioritize mitigations. Use when prioritizing threats, allocating security budget, and communicating risk to leadership.

لغة النص الأصلي: الإنجليزية

stride-analysis

Systematically identify and document threats using the STRIDE framework (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). Use when designing systems, reviewing architectures, conducting security design…

لغة النص الأصلي: الإنجليزية

threat-identification

Systematically identify threats from threat libraries, historical CVEs, and attacker tactics. Use when augmenting STRIDE analysis with known threats from MITRE ATT&CK, CWE, or your industry.

لغة النص الأصلي: الإنجليزية

threat-library

Build and maintain a reusable threat library tailored to your organization, platform, and threat landscape. Use when cataloging threats for future analyses, threat modeling sessions, and architecture reviews.

لغة النص الأصلي: الإنجليزية

trust-boundary-analysis

Identify trust boundaries in system architecture where privilege levels, authority, or security contexts change. Use when designing authentication, authorization, and inter-component communication.

لغة النص الأصلي: الإنجليزية