cops-security-marketplace

Offline evidence-linked attack-path analysis of user-supplied exports.

6 skills · 6 agents

Offline authorized-scope reconciliation and passive attack surface test planning.

9 skills

Review repository signals and produce cost-aware security logging recommendations.

3 skills · 2 commands · 2 agents

Author and stress-test defensive Microsoft hunting workflows with deterministic offline evidence.

6 skills · 1 agent

Authorized adversary engagement intake, scope validation, and execution planning.

5 skills

Rehearse synthetic agent/MCP authorization and normalize provider-shaped responses from deterministic offline fixtures.

3 skills

Offline Linux and Windows evidence classification with a bounded read-only native Windows bridge.

2 skills

Plan and review local evidence-backed SOC investigations; external hunt integration remains pending.

2 skills

Analyze scoped Active Directory inventory, provenance, and candidate privilege paths offline.

1 skill

Review exported cloud configuration and rendered workloads for IAM, storage, RBAC and workload policy weaknesses.

1 skill

Map versioned SOC 2, CIS and NIST controls to dated evidence; identify unsupported and unknown control claims.

1 skill

Evaluate detection rule quality, dependencies, schema drift, and regression baselines for Sentinel KQL and Splunk SPL.

1 skill

Model, analyze, and review Entra ID and AI Agent identity graphs, privilege boundaries, and exposure paths offline.

1 skill

Validate offline versioned vulnerability reproduction plans and local evidence digests.

1 skill

Prioritize vulnerability alerts using multi-source evidence including SBOM versions, cloud asset criticality, and network reachability.

1 skill

Offline incident action planning and fixture-only sandbox execution.

1 skill

Reconcile an approved Kubernetes context with a sanitized local observation without cluster access.

1 skill

Compare firewall and workload policy intent with flow, DNS and bounded laboratory reachability evidence.

1 skill

Bounded offline security review of an immutable Git commit pair.

1 skill

Assess redacted Git history and identity evidence to plan credential exposure remediation and verify lab revocation.

1 skill

Inspect dependency, SBOM and CI evidence for vulnerable packages, unsafe permissions and registry resolution risks.

1 skill

Trace synthetic test markers across Cribl Stream routing, Splunk and Sentinel indexing, and detection evaluation to prove pipeline health.

1 skill

Read-only source-specific threat intelligence lookups with explicit privacy approval and bounded requests.

1 skill

Review TLS chains, mTLS client authorization and JWT/JWKS signing configuration using ephemeral laboratory credentials.

1 skill

Import HTTP traffic, OpenAPI schemas, and Postman collections, model endpoints and isolated sessions, and execute bounded request replays.

1 skill