Tradecraft Windows

BloodHound, AzureHound, GitHound/JamfHound/OktaHound OpenGraph attack-path query workflows, SCIM bridge references, and optional BloodHound MCP packaging.

9 skills

Report timeline ingestion, consolidation, and evidence packaging workflows.

8 skills

Social engineering research and phishing pretext workflows.

6 skills

Development scaffolding, repository hygiene, security tooling, and implementation workflows for Specter Codex.

6 skills

Cobalt Strike operations, Aggressor Script, Sleep, BOF loader, and Malleable C2 profile workflows.

4 skills

Security review for Go packages and services covering trust boundaries, injection, filesystem, crypto, concurrency, and unsafe/cgo edges

1 skill · 3 agents

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications

5 skills · hooks

Use Alibaba Open Code Review from local Codex.

2 skills

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

Use Codex from Claude Code to review code or delegate tasks.

3 skills · 8 commands · 1 agent · hooks

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server