SkillsAdd

Source

sugatoray/unitoneai-securityskills

45 skills · 45 combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
access-review Conducts access review and entitlement audit against CIS Controls v8 (Controls 5, 6) and NIST SP 800-53 AC family. Au…
sugatoray/unitoneai-securityskills
1
2
agent-security Reviews AI agent architectures for security risks including permission model design, least-privilege enforcement, hum…
sugatoray/unitoneai-securityskills
1
3
agentic-top-10 Reviews agentic AI systems against the OWASP Top 10 security risks for autonomous AI agents. Auto-invoked when review…
sugatoray/unitoneai-securityskills
1
4
ai-data-privacy Reviews AI/ML systems for data privacy and governance risks including training data privacy, PII exposure in prompts …
sugatoray/unitoneai-securityskills
1
5
alert-triage Guides structured triage of security alerts using a four-phase methodology (collect, correlate, classify, escalate) m…
sugatoray/unitoneai-securityskills
1
6
api-security Reviews REST and GraphQL APIs against the OWASP API Security Top 10:2023. Auto-invoked when reviewing OpenAPI/Swagger…
sugatoray/unitoneai-securityskills
1
7
aws-review Performs an AWS security posture review against the CIS Amazon Web Services Foundations Benchmark v3.0.0. Auto-invoke…
sugatoray/unitoneai-securityskills
1
8
azure-review Performs an Azure security posture review against the CIS Microsoft Azure Foundations Benchmark v2.1.0. Auto-invoked …
sugatoray/unitoneai-securityskills
1
9
container-security Performs a container and Kubernetes security review against the CIS Docker Benchmark v1.6.0, CIS Kubernetes Benchmark…
sugatoray/unitoneai-securityskills
1
10
containment Provides structured incident containment strategies mapped to NIST SP 800-61 Rev 2 and MITRE ATT&CK techniques. Auto-…
sugatoray/unitoneai-securityskills
1
11
cve-triage Triages and prioritizes CVEs using CVSS 4.0, SSVC 2.1 decision trees, EPSS scores, and CISA KEV catalog cross-referen…
sugatoray/unitoneai-securityskills
1
12
dast-config Reviews DAST tool configurations against OWASP Top 10:2021 and OWASP Testing Guide v4.2. Auto-invoked when reviewing …
sugatoray/unitoneai-securityskills
1
13
dependency-scanning Analyzes project dependencies for known vulnerabilities, license risks, and supply chain integrity. Auto-invoked when…
sugatoray/unitoneai-securityskills
1
14
detection-engineering Guides creation of detection rules using Sigma rule specification and the Palantir Alerting and Detection Strategy (A…
sugatoray/unitoneai-securityskills
1
15
dns-security Performs a structured DNS security review against NIST SP 800-81 Rev 2 (Secure Domain Name System Deployment Guide) a…
sugatoray/unitoneai-securityskills
1
16
firewall-review Performs a structured firewall rule base audit against CIS Controls v8 (Controls 4.4 and 4.5) and NIST SP 800-41 Rev …
sugatoray/unitoneai-securityskills
1
17
forensics-checklist Guides digital forensic evidence collection following NIST SP 800-86 and RFC 3227 order of volatility. Auto-invoked w…
sugatoray/unitoneai-securityskills
1
18
gcp-review Performs a GCP security posture review against the CIS Google Cloud Platform Foundation Benchmark v2.0.0. Auto-invoke…
sugatoray/unitoneai-securityskills
1
19
hipaa-review Performs a HIPAA Security Rule compliance review against all Administrative, Physical, and Technical Safeguards defin…
sugatoray/unitoneai-securityskills
1
20
iac-security Performs a security review of Infrastructure as Code templates against the OWASP IaC Security Cheat Sheet, SLSA v1.0,…
sugatoray/unitoneai-securityskills
1
21
iam-review Reviews identity and access management configurations against NIST SP 800-63B, NIST SP 800-207 zero trust principles,…
sugatoray/unitoneai-securityskills
1
22
ir-playbook Executes a structured incident response workflow based on NIST SP 800-61 Rev 2 and the SANS Incident Handler's Handbo…
sugatoray/unitoneai-securityskills
1
23
iso27001-gap Performs an ISO 27001:2022 gap analysis against the full ISMS requirements (Clauses 4-10) and all 93 Annex A controls…
sugatoray/unitoneai-securityskills
1
24
llm-top-10 Reviews LLM-powered applications against the OWASP Top 10 for Large Language Model Applications (2025 edition). Auto-…
sugatoray/unitoneai-securityskills
1
25
log-analysis Guides structured security log analysis across authentication, network, endpoint, and cloud audit log sources. Auto-i…
sugatoray/unitoneai-securityskills
1
26
model-supply-chain Reviews AI/ML model supply chains for security risks including model provenance verification, training data lineage, …
sugatoray/unitoneai-securityskills
1
27
nist-csf-assessment Performs a NIST Cybersecurity Framework 2.0 assessment across all six functions (Govern, Identify, Protect, Detect, R…
sugatoray/unitoneai-securityskills
1
28
owasp-top-10-web Reviews web applications against the OWASP Top 10:2021 vulnerability categories. Auto-invoked when reviewing web appl…
sugatoray/unitoneai-securityskills
1
29
patch-prioritization Prioritizes patches and manages remediation SLAs using SSVC 2.1 decision outcomes, EPSS v3 trend analysis, and CISA K…
sugatoray/unitoneai-securityskills
1
30
pci-dss-review Performs a PCI DSS v4.0 compliance review across all 12 requirements and their sub-requirements. Auto-invoked when di…
sugatoray/unitoneai-securityskills
1
31
pipeline-security Reviews CI/CD pipeline configurations against SLSA v1.0 build levels and OWASP Top 10 CI/CD Security Risks. Auto-invo…
sugatoray/unitoneai-securityskills
1
32
post-incident-review Conducts a structured post-incident review following NIST SP 800-61 Rev 2 Post-Incident Activity guidance. Auto-invok…
sugatoray/unitoneai-securityskills
1
33
privileged-access Performs a Privileged Access Management (PAM) review against CIS Controls v8 (Controls 5.4, 6.5) and NIST SP 800-53 A…
sugatoray/unitoneai-securityskills
1
34
prompt-injection Tests LLM applications for prompt injection vulnerabilities per OWASP LLM01:2025. Covers direct injection (user input…
sugatoray/unitoneai-securityskills
1
35
rbac-design Guides the design and assessment of RBAC and ABAC authorization models against the NIST RBAC model (Sandhu et al.) an…
sugatoray/unitoneai-securityskills
1
36
sast-config Reviews and tunes SAST tool configurations against OWASP ASVS 4.0.3 and CWE Top 25. Auto-invoked when reviewing Semgr…
sugatoray/unitoneai-securityskills
1
37
sbom-analysis Analyzes Software Bills of Materials (SBOMs) for completeness against NTIA minimum elements, interprets VEX status do…
sugatoray/unitoneai-securityskills
1
38
scanner-tuning Tunes vulnerability scanners to reduce false positives, optimize scan policies, and improve result accuracy. Covers f…
sugatoray/unitoneai-securityskills
1
39
secrets-management Performs a structured secrets management review against OWASP Secrets Management Cheat Sheet and NIST SP 800-57 Part …
sugatoray/unitoneai-securityskills
1
40
secure-code-review Performs a structured security code review against OWASP ASVS 4.0.3 verification requirements and CWE Top 25. Auto-in…
sugatoray/unitoneai-securityskills
1
41
segmentation Performs a structured network segmentation review against NIST SP 800-207 (Zero Trust Architecture) and CIS Controls …
sugatoray/unitoneai-securityskills
1
42
siem-rules Guides development of SIEM detection rules using KQL (Microsoft Sentinel) and SPL (Splunk) query languages, mapped to…
sugatoray/unitoneai-securityskills
1
43
soc2-gap Performs a SOC 2 Type II readiness gap analysis against AICPA Trust Services Criteria. Auto-invoked when discussing S…
sugatoray/unitoneai-securityskills
1
44
threat-modeling Runs a structured STRIDE threat model on any system design, API specification, or codebase. Auto-invoked when the use…
sugatoray/unitoneai-securityskills
1
45
zero-trust-assessment Performs a Zero Trust Architecture maturity assessment against NIST SP 800-207 and the CISA Zero Trust Maturity Model…
sugatoray/unitoneai-securityskills
1