blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
Plugin container-security from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
container-runtime-securityContainer runtime isolation reference: namespaces, Linux capabilities, seccomp, AppArmor, user namespace remapping, hardened docker run and Compose examples, and anti-patterns such as --privileged, Docker socket mounts, and --pid=host. Use when configuring how containers run.
dockerfile-hardeningSecure Dockerfile patterns: base image hierarchy, multi-stage builds for Node.js and Go on distroless or scratch, BuildKit secret mounts, and non-root execution. Use when writing or reviewing a Dockerfile.
/container-security:container-auditAudit Dockerfiles and Docker or Podman Compose files for security issues such as root users, unpinned images, secrets in layers, and excess privileges, with fixes.
/container-security:image-scanScan a container image, tarball, or existing scanner report for vulnerabilities and misconfigurations, produce an SBOM, and prioritize the fixes.
container-hardenerUse this agent when writing, reviewing, or hardening Dockerfiles, Compose files, or container runtime settings: base image choice, multi-stage builds, non-root users, BuildKit secret mounts, capability dropping, read-only filesystems, and image signing with Cosign. It produces hardened configuration
image-scannerUse this agent when assessing a built container image for vulnerabilities and supply chain risk: running or interpreting Trivy, Grype, Snyk Container, or Docker Scout results, generating CycloneDX or SPDX SBOMs, and prioritizing CVEs with EPSS and CISA KEV. It produces a triaged vulnerability report
Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.
2 skills · 2 commands · 2 agents
Teaches Claude container's command surface and how it maps to Docker, Lima, Colima, and Podman on macOS
1 skill
Agent skills for Azure SQL Developer, the Azure SQL Database engine running locally in a container. Teaches your agent to run the engine, connect, migrate, scaffold, build RAG, wire CI, and go local-to-cloud, using the real Private Preview image instead of the SQL Server image.
17 skills
Configure, run, and interpret HawkScan DAST results. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.
1 skill · hooks
Docker and container development — Dockerfile optimization, docker-compose orchestration, multi-stage builds, security hardening, and CI/CD container pipelines.
1 skill
DevOps, cloud, and deployment specialists - Kubernetes, Terraform, AWS, Azure, GCP, and SRE
Agent skills for creating BentoML projects, containerizing them, and deploying them to Kubernetes or EC2 with a fully open-source stack
5 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.