Claude Skills 列表

Comprehensive OSINT methodology for external red-team operations and authorized attack-surface assessments.

Authorized OT/ICS security assessment: Purdue-model zoning review, PLC/SCADA exposure, industrial protocol discovery, and passive-first evaluation discipline.

Expert in Odoo access control: ir.model.access.csv, record rules (ir.rule), groups, and multi-company security patterns.

Operational arsenal for authorized external red-team and bug-bounty recon.

Okta-as-IdP red-team attack chain

Secure OpenClaw deployments with preflight hardening checks, CI/CD guardrails, container runtime restrictions, and post-deploy verification.

Harden OpenClaw self-hosted environments with baseline host controls, auth tightening, secret handling, network segmentation, and safe update/rollback workflows.

Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service...

Configure and test common network services (HTTP, HTTPS, SNMP, SMB) for penetration testing lab environments. Enable hands-on practice with service enumeration, log analysis, and...

Review a scoped architecture against evidence-based network, identity, data, secrets, dependency and incident-response controls.

Microsoft Entra Authentication Events SDK for .NET. Azure Functions triggers for custom authentication extensions.

Methodology for detecting client SOC patches, attacker activity, and security-state changes that occur DURING a red-team engagement

Authorized Android/iOS application reverse engineering and security testing: APK/IPA analysis, runtime instrumentation (Frida/Objection), SSL-pinning and jailbreak/root-detection...

Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns.

Secure the AI model supply chain with artifact signing, provenance attestation, SBOM workflows, dependency controls, and trusted model promotion.

Statically audit MCP configs for mutable npm/npx package references before approval or CI, without executing discovered MCP servers.

Secure Model Context Protocol (MCP) servers with transport encryption, tool authorization, input validation, and audit logging for safe AI agent integrations.

Meme coin and token security audit

Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for incident response and malware analysis.

⚠️ AUTHORIZED USE ONLY > This skill is for educational purposes or authorized security assessments only. > You must have explicit, written permission from the system owner before...