Security & Review
Cyber Essentials (UK) Advisor
Expert guidance for UK Cyber Essentials and CE Plus certification under the current Danzell (v3.3) question set, including gap assessments and scoping.
Forensify — AI Agent Stack Self-Audit
A read-only auditor that inventories the skills, MCP servers, hooks, plugins and credential files already installed on your machine and reports the risk surface.
Forensify — Cross-Agent Stack Self-Audit
Read-only audit of the skills, MCP servers, hooks, plugins, and credentials already installed across Claude Code, Codex, OpenClaw, and Cursor, with a structured risk briefing.
Security Audit
Runs a deep security audit across OWASP Top 10, secrets, and dependency CVEs, then writes a dated report with an approval verdict.
Absolute Audit
A defensive security-audit skill that scans your whole repo for dependency CVEs and risky code patterns, triages them by severity and reachability, then fixes them without suppressing alerts.
Agent Decision Receipts
Mint tamper-evident, post-quantum-signed receipts for consequential agent actions and verify them offline from the certificate alone.
Vietnam Law Compliance Check
Audits a website or mobile app against Vietnamese law on personal data, e-commerce, cybersecurity, advertising and AI transparency, and drafts the matching privacy policy.
Vietnam Legal Compliance Audit (vn-law-check)
Audits a website or mobile app against Vietnamese law on personal data, e-commerce, cybersecurity and advertising, then produces a graded report and policy drafts.
PR Security Review
Reviews only a PR's diff against its base branch and reports just the high-confidence, exploitable security issues.
Cloudflare One Zero Trust Design & Troubleshooting
Guides Claude through expert-grade design, configuration, and troubleshooting of Cloudflare One Zero Trust / SASE deployments.
AIMS ISO 42001 Audit Interrogation
Pressure-tests an ISO/IEC 42001 AI Management System with six forcing questions before certification or internal audit.
Security and Hardening
An OWASP-driven security review skill that hardens user input, auth, dependencies, and LLM features with concrete code patterns.
Security & Compliance Pre-Scan Gate
A zero-trust gatekeeper skill that scans every incoming file or URL and returns a pass/reject verdict plus a compliance scan report before any document processing happens.
Threat Hunting & IOC Analysis
A security skill that extracts IOCs from threat reports, maps them to MITRE ATT&CK, and turns them into SIEM queries and Sigma rules.
WinDiff Version Diff Analysis
Uses the WinDiff CLI to diff two Windows builds and interpret new syscalls, structs, mitigation flags, and ETW/callback surface into a security-research report.
Cloudflare One Migration Planner
Plans assessments, policy mappings, and staged rollouts when migrating from Zscaler ZIA/ZPA, Palo Alto, or legacy VPN/SWG stacks to Cloudflare One.
Human in the Loop (Approval Gate Design)
Designs and verifies auditable human approval gates, escalation paths, and safe state transitions for risky AI agent actions.
Robotics Security Hardening
A hands-on guide for hardening ROS2 robots end to end: SROS2/DDS encryption, network segmentation, secrets, container security, and cyber-physical safety.