DFIR and detection built on preserve-first, base-rate discipline. 22 defensive security skills for SOC analysts, incident responders, and detection engineers: alert triage, malware and shellcode analysis, memory/disk/network forensics, phishing-email analysis, Windows endpoint DFIR, Linux persistence hunting, AWS/Azure/GCP/M365-Entra incident investigation, Kubernetes defense, cloud posture hardening, threat hunting, detection-as-code (Sigma/YARA/Suricata) with real false-positive analysis, risk-based vulnerability management, and threat intelligence. Every skill fact-checked against primary sources. Pairs with secskills-core.
MCP server (pastevault mcp) and skill: ask the user for secrets without them entering the chat, use them via pastevault run, and share text and files end-to-end encrypted with people or other agents.
Exposes MalChela's full malware analysis suite to Claude: file analysis (hashes, entropy, PE metadata, YARA, VirusTotal), string extraction with MITRE ATT&CK mapping, hash lookups against VirusTotal and MalwareBazaar, NSRL known-good queries, and directory scanning for file type anomalies.
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button for making your Claude-generated code safe and secure.
Security firewall and supply-chain verifier (hooks): gates mainnet, value-moving and authority actions and secret reads, and pins installed skills and MCPs at session start. Core part of the kit: solana-ai-kit depends on it.
Apply the SAIL V2 (Secure AI Lifecycle) framework to secure AI applications and agents — gap analyses, security roadmaps, maturity assessments, compliance checklists (ISO/IEC 42001, EU AI Act, OWASP, DASF, AIUC-1), control prioritization, and vendor RFPs. Grounded in the full 91-risk SAIL catalog.
Comprehensive red teaming methodology for both cybersecurity (MITRE ATT&CK, pentesting) and AI/LLM systems (prompt injection, jailbreaking, OWASP Top 10 LLM). Includes threat modeling, attack simulation, compliance validation (NIST, EU AI Act), and progressive attack technique references.
Assess and enhance software projects for enterprise-grade security, quality, and automation. Includes supply chain security (SLSA, signing, SBOMs), quality gates, and platform-specific hardening with dynamic scoring.
Self-audit AI agent, tool, and MCP-server code for security and reliability misconfigurations with Trustabl, the agent reliability scanner for the OpenAI Agents SDK, Claude Agent SDK, Google ADK, and MCP.