MikeTreml/MissionControl - Page 45

rust-sdk-specialist

Rust SDK development with zero-cost abstractions

scope-permission-designer

Design and implement scoped permission models

sdk-init-generator

Generate SDK initialization wizards and scaffolding

sdk-mock-generator

Generate mock servers and clients for SDK testing

semver-analyzer

Analyze code changes and determine semantic version bumps. Detect breaking changes automatically, suggest version bump (major/minor/patch), generate changelog entries, and validate version consistency.

smithy-sdk-generator

AWS Smithy-based SDK generation for enterprise-grade APIs

typescript-sdk-specialist

TypeScript SDK development with Node.js and browser support. Design SDK architecture, implement type-safe API clients, support ESM and CommonJS modules, and configure bundling for browsers.

typespec-sdk-generator

Microsoft TypeSpec-based API and SDK generation

usage-analytics-collector

Privacy-respecting SDK usage analytics collection

aws-security-scanner

AWS security configuration scanning and hardening using Prowler, Security Hub, and AWS Config

azure-security-scanner

Azure security configuration scanning and hardening using Azure Security Center, Azure Policy, and ScoutSuite

compliance-evidence-collector

Automated evidence collection across compliance frameworks from cloud providers, identity systems, and security tools

container-security-scanner

Container image and Kubernetes security scanning for CVEs, misconfigurations, and compliance

crypto-analyzer

Cryptographic implementation analysis and validation for encryption algorithms, key sizes, and certificate management

dast-scanner

Dynamic Application Security Testing execution and management. Configure and execute OWASP ZAP and Nuclei scans, run authenticated scanning, manage scan policies and scope, correlate findings with SAST results, and generate comprehensive vulnerability reports.

dependency-scanner

Software Composition Analysis (SCA) and dependency vulnerability scanning. Scan npm, pip, maven, gradle dependencies. Check CVE databases, generate SBOM (CycloneDX, SPDX), identify license compliance issues, and track EPSS scores for prioritization.

gcp-security-scanner

GCP security configuration scanning and hardening using Security Command Center, Forseti, and ScoutSuite

gdpr-compliance-automator

GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments

git-forensics-scanner

Git diff forensics for surfacing and classifying code changes for trojan detection

hipaa-compliance-automator

HIPAA security and privacy compliance automation for ePHI protection, safeguards assessment, and audit preparation

homoglyph-detector

Byte-level Unicode homoglyph detection for identifying invisible character substitutions in code

iac-security-scanner

Infrastructure as Code security scanning and policy enforcement for Terraform, CloudFormation, Kubernetes, and Pulumi

key-management-orchestrator

Cryptographic key lifecycle management orchestration including generation, rotation, and destruction across key management systems

multi-cloud-security-posture

Unified cloud security posture management across AWS, Azure, and GCP with normalized metrics and CIS benchmark comparison

owasp-security-scanner

Automated OWASP Top 10 vulnerability detection and assessment. Run OWASP ZAP automated scans, detect injection vulnerabilities, identify broken authentication patterns, check for sensitive data exposure, analyze security misconfigurations, and generate…

pci-dss-compliance-automator

PCI DSS compliance assessment and reporting for cardholder data protection, SAQ automation, and ASV scan orchestration

phishing-simulation-skill

Phishing simulation campaign execution and analysis for security awareness assessment

sast-analyzer

Static Application Security Testing orchestration and analysis. Execute Semgrep, Bandit, ESLint security plugins, CodeQL, and other SAST tools. Parse, prioritize, and deduplicate findings across multiple tools with remediation guidance.

secret-detection-scanner

Detect secrets, credentials, and sensitive data in code and configurations. Scan git history for secrets, detect API keys, tokens, passwords, check environment files, monitor CI/CD logs for exposure, generate remediation steps, and track secret rotation…

secure-coding-training-skill

Developer security training and assessment for secure coding practices and vulnerability prevention

semantic-code-analyzer

LLM-powered semantic analysis of code diffs to detect business-logic trojans

soc2-compliance-automator

SOC 2 Trust Services Criteria compliance automation for evidence collection, control mapping, and audit preparation

vendor-risk-monitor

Continuous vendor security monitoring for security ratings, breach notifications, and risk change detection

vendor-security-questionnaire

Automated vendor security assessment through questionnaire generation, response parsing, and risk scoring

aiml-security

AI/ML model security testing and adversarial research capabilities. Generate adversarial examples, test model robustness, perform model extraction attacks, test for data poisoning, analyze model fairness, and support ART framework integration.

binary-exploitation-skill

Advanced binary exploitation and mitigation bypass

burp-suite-web-security-skill

Web application security testing with Burp Suite integration

cloud-security-testing

Multi-cloud security assessment and penetration testing capabilities. Execute Prowler/ScoutSuite assessments, analyze IAM policies, identify cloud misconfigurations, test permissions, and enumerate cloud resources across AWS/GCP/Azure.

cve-cwe-database-skill

CVE and CWE database querying and management

debugger-integration-skill

Advanced debugging integration for vulnerability research