security

Plugin security from marketplace errorproof-skills in errorproofdev/skills. Commands read from the repo's manifest — 5 days ago.

Skills (17)

• aws-penetration-testing

  Provide comprehensive techniques for penetration testing AWS cloud environments. Covers IAM enumeration, privilege escalation, SSRF to metadata endpoint, S3 bucket exploitation, Lambda code extraction, and persistence techniques for red team operations.

• burp-suite-testing

  Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows.

• burpsuite-project-parser

  Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

• cred-omega

  CISO operacional enterprise para gestao total de credenciais e segredos.

• ethical-hacking-methodology

  Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the five stages of ethical hacking methodology, essential tools, attack techniques, and professional reporting for authorized security assessments.

• google-cloud-waf-security

  Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate workloads, identify security requirements, and provide actionable recommendations for IAM, network securi

• laravel-security-audit

  Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.

• pci-compliance

  Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processing and handling of cardholder data.

• privacy-by-design

  Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.

• red-team-tactics

  Red team tactics principles based on MITRE ATT&CK. Attack phases, detection evasion, reporting.

• reverse-engineer

  Expert reverse engineer specializing in binary analysis, disassembly, decompilation, and software analysis. Masters IDA Pro, Ghidra, radare2, x64dbg, and modern RE toolchains.

• secrets-management

  Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.

• security-requirement-extraction

  Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

• semgrep-rule-variant-creator

  Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.

• solidity-security

  Master smart contract security best practices, vulnerability prevention, and secure Solidity development patterns.

• ssh-hardening

  Audit or harden OpenSSH on Ubuntu/Debian with verified key access. Use when changing authentication or administrative SSH access.

• wordpress-penetration-testing

  Assess WordPress installations for common vulnerabilities and WordPress 7.0 attack surfaces.

Similar plugins