agentsecops/secopsagentkit

1

skill-name [REQUIRED] Comprehensive description of what this skill does and when to use it. Include: (1) Primary functionality, …

agentsecops/secopsagentkit

53

2

sca-trivy Software Composition Analysis (SCA) and container vulnerability scanning using Aqua Trivy for identifying CVE vulnera…

agentsecops/secopsagentkit

26

3

dast-zap Dynamic application security testing (DAST) using OWASP ZAP (Zed Attack Proxy) with passive and active scanning, API …

agentsecops/secopsagentkit

24

4

secrets-gitleaks Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API…

agentsecops/secopsagentkit

24

5

api-mitmproxy Interactive HTTPS proxy for API security testing with traffic interception, modification, and replay capabilities. Su…

agentsecops/secopsagentkit

23

6

sast-semgrep Static application security testing (SAST) using Semgrep for vulnerability detection, security code review, and secur…

agentsecops/secopsagentkit

23

7

analysis-tshark Network protocol analyzer and packet capture tool for traffic analysis, security investigations, and forensic examina…

agentsecops/secopsagentkit

22

8

api-spectral API specification linting and security validation using Stoplight's Spectral with support for OpenAPI, AsyncAPI, and …

agentsecops/secopsagentkit

22

9

container-grype Container vulnerability scanning and dependency risk assessment using Grype with CVSS severity ratings, EPSS exploit …

agentsecops/secopsagentkit

22

10

crack-hashcat Advanced password recovery and hash cracking tool supporting multiple algorithms and attack modes. Use when: (1) Perf…

agentsecops/secopsagentkit

22

11

dast-nuclei Fast, template-based vulnerability scanning using ProjectDiscovery's Nuclei with extensive community templates coveri…

agentsecops/secopsagentkit

22

12

iac-checkov Infrastructure as Code (IaC) security scanning using Checkov with 750+ built-in policies for Terraform, CloudFormatio…

agentsecops/secopsagentkit

22

13

ir-velociraptor Endpoint visibility, digital forensics, and incident response using Velociraptor Query Language (VQL) for evidence co…

agentsecops/secopsagentkit

22

14

policy-opa Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA). Use when: (1) Enforcing security …

agentsecops/secopsagentkit

22

15

recon-nmap Network reconnaissance and security auditing using Nmap for port scanning, service enumeration, and vulnerability det…

agentsecops/secopsagentkit

22

16

reviewdog Automated code review and security linting integration for CI/CD pipelines using reviewdog. Aggregates findings from …

agentsecops/secopsagentkit

22

17

sast-bandit Python security vulnerability detection using Bandit SAST with CWE and OWASP mapping. Use when: (1) Scanning Python c…

agentsecops/secopsagentkit

22

18

sbom-syft Software Bill of Materials (SBOM) generation using Syft for container images, filesystems, and archives. Detects pack…

agentsecops/secopsagentkit

22

19

webapp-nikto Web server vulnerability scanner for identifying security issues, misconfigurations, and outdated software versions. …

agentsecops/secopsagentkit

22

20

webapp-sqlmap Automated SQL injection detection and exploitation tool for web application security testing. Use when: (1) Testing w…

agentsecops/secopsagentkit

22

21

container-hadolint Dockerfile security linting and best practice validation using Hadolint with 100+ built-in rules aligned to CIS Docke…

agentsecops/secopsagentkit

21

22

detection-sigma Generic detection rule creation and management using Sigma, the universal SIEM rule format. Sigma provides vendor-agn…

agentsecops/secopsagentkit

21

23

forensics-osquery SQL-powered forensic investigation and system interrogation using osquery to query operating systems as relational da…

agentsecops/secopsagentkit

21

24

ot-security-assessment Operational Technology (OT) security assessment using a two-stage methodology: (1) Identification/Discovery of OT dev…

agentsecops/secopsagentkit

21

25

pentest-metasploit Penetration testing framework for exploit development, vulnerability validation, and authorized security assessments …

agentsecops/secopsagentkit

21

26

pytm Python-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and a…

agentsecops/secopsagentkit

21

27

dast-ffuf Fast web fuzzer for DAST testing with directory enumeration, parameter fuzzing, and virtual host discovery. Written i…

agentsecops/secopsagentkit

20

28

privesc-linpeas Linux privilege escalation enumeration and attack surface analysis using LinPEAS (Linux Privilege Escalation Awesome …

agentsecops/secopsagentkit

20

29

sast-horusec Multi-language static application security testing using Horusec with support for 18+ programming languages and 20+ s…

agentsecops/secopsagentkit

20

30

sca-blackduck Software Composition Analysis (SCA) using Synopsys Black Duck for identifying open source vulnerabilities, license co…

agentsecops/secopsagentkit

20

31

vuln-defectdojo Vulnerability management and findings aggregation using DefectDojo. Centralizes security findings from all SecOpsAgen…

agentsecops/secopsagentkit

20

32

network-netcat Network utility for reading and writing data across TCP/UDP connections, port scanning, file transfers, and backdoor …

agentsecops/secopsagentkit

16