Source

unitoneai/securityskills

50 skills · 2.5K combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
secure-code-review Performs a structured security code review against OWASP ASVS 4.0.3 verification requirements and CWE Top 25. Auto-in…
unitoneai/securityskills
80
2
api-security Reviews REST and GraphQL APIs against the OWASP API Security Top 10:2023. Auto-invoked when reviewing OpenAPI/Swagger…
unitoneai/securityskills
67
3
dependency-scanning Analyzes project dependencies for known vulnerabilities, license risks, and supply chain integrity. Auto-invoked when…
unitoneai/securityskills
63
4
dns-security Performs a structured DNS security review against NIST SP 800-81 Rev 2 (Secure Domain Name System Deployment Guide) a…
unitoneai/securityskills
62
5
owasp-top-10-web Reviews web applications against the OWASP Top 10:2021 vulnerability categories. Auto-invoked when reviewing web appl…
unitoneai/securityskills
62
6
secrets-management Performs a structured secrets management review against OWASP Secrets Management Cheat Sheet and NIST SP 800-57 Part …
unitoneai/securityskills
61
7
threat-modeling Runs a structured STRIDE threat model on any system design, API specification, or codebase. Auto-invoked when the use…
unitoneai/securityskills
61
8
agentic-top-10 Reviews agentic AI systems against the OWASP Top 10 security risks for autonomous AI agents. Auto-invoked when review…
unitoneai/securityskills
60
9
rbac-design Guides the design and assessment of RBAC and ABAC authorization models against the NIST RBAC model (Sandhu et al.) an…
unitoneai/securityskills
59
10
pipeline-security Reviews CI/CD pipeline configurations against SLSA v1.0 build levels and OWASP Top 10 CI/CD Security Risks. Auto-invo…
unitoneai/securityskills
57
11
agent-security Reviews AI agent architectures for security risks including permission model design, least-privilege enforcement, hum…
unitoneai/securityskills
56
12
container-security Performs a container and Kubernetes security review against the CIS Docker Benchmark v1.6.0, CIS Kubernetes Benchmark…
unitoneai/securityskills
56
13
cve-triage Triages and prioritizes CVEs using CVSS 4.0, SSVC 2.1 decision trees, EPSS scores, and CISA KEV catalog cross-referen…
unitoneai/securityskills
56
14
ai-data-privacy Reviews AI/ML systems for data privacy and governance risks including training data privacy, PII exposure in prompts …
unitoneai/securityskills
55
15
llm-top-10 Reviews LLM-powered applications against the OWASP Top 10 for Large Language Model Applications (2025 edition). Auto-…
unitoneai/securityskills
55
16
forensics-checklist Guides digital forensic evidence collection following NIST SP 800-86 and RFC 3227 order of volatility. Auto-invoked w…
unitoneai/securityskills
54
17
log-analysis Guides structured security log analysis across authentication, network, endpoint, and cloud audit log sources. Auto-i…
unitoneai/securityskills
54
18
model-supply-chain Reviews AI/ML model supply chains for security risks including model provenance verification, training data lineage, …
unitoneai/securityskills
54
19
sast-config Reviews and tunes SAST tool configurations against OWASP ASVS 4.0.3 and CWE Top 25. Auto-invoked when reviewing Semgr…
unitoneai/securityskills
54
20
zero-trust-assessment Performs a Zero Trust Architecture maturity assessment against NIST SP 800-207 and the CISA Zero Trust Maturity Model…
unitoneai/securityskills
54
21
access-review Conducts access review and entitlement audit against CIS Controls v8 (Controls 5, 6) and NIST SP 800-53 AC family. Au…
unitoneai/securityskills
53
22
alert-triage Guides structured triage of security alerts using a four-phase methodology (collect, correlate, classify, escalate) m…
unitoneai/securityskills
53
23
iso27001-gap Performs an ISO 27001:2022 gap analysis against the full ISMS requirements (Clauses 4-10) and all 93 Annex A controls…
unitoneai/securityskills
53
24
privileged-access Performs a Privileged Access Management (PAM) review against CIS Controls v8 (Controls 5.4, 6.5) and NIST SP 800-53 A…
unitoneai/securityskills
53
25
prompt-injection Tests LLM applications for prompt injection vulnerabilities per OWASP LLM01:2025. Covers direct injection (user input…
unitoneai/securityskills
53
26
sbom-analysis Analyzes Software Bills of Materials (SBOMs) for completeness against NTIA minimum elements, interprets VEX status do…
unitoneai/securityskills
53
27
azure-review Performs an Azure security posture review against the CIS Microsoft Azure Foundations Benchmark v2.1.0. Auto-invoked …
unitoneai/securityskills
52
28
containment Provides structured incident containment strategies mapped to NIST SP 800-61 Rev 2 and MITRE ATT&CK techniques. Auto-…
unitoneai/securityskills
52
29
detection-engineering Guides creation of detection rules using Sigma rule specification and the Palantir Alerting and Detection Strategy (A…
unitoneai/securityskills
52
30
iac-security Performs a security review of Infrastructure as Code templates against the OWASP IaC Security Cheat Sheet, SLSA v1.0,…
unitoneai/securityskills
52
31
patch-prioritization Prioritizes patches and manages remediation SLAs using SSVC 2.1 decision outcomes, EPSS v3 trend analysis, and CISA K…
unitoneai/securityskills
52
32
scanner-tuning Tunes vulnerability scanners to reduce false positives, optimize scan policies, and improve result accuracy. Covers f…
unitoneai/securityskills
52
33
segmentation Performs a structured network segmentation review against NIST SP 800-207 (Zero Trust Architecture) and CIS Controls …
unitoneai/securityskills
52
34
soc2-gap Performs a SOC 2 Type II readiness gap analysis against AICPA Trust Services Criteria. Auto-invoked when discussing S…
unitoneai/securityskills
52
35
aws-review Performs an AWS security posture review against the CIS Amazon Web Services Foundations Benchmark v3.0.0. Auto-invoke…
unitoneai/securityskills
51
36
dast-config Reviews DAST tool configurations against OWASP Top 10:2021 and OWASP Testing Guide v4.2. Auto-invoked when reviewing …
unitoneai/securityskills
51
37
iam-review Reviews identity and access management configurations against NIST SP 800-63B, NIST SP 800-207 zero trust principles,…
unitoneai/securityskills
51
38
ir-playbook Executes a structured incident response workflow based on NIST SP 800-61 Rev 2 and the SANS Incident Handler's Handbo…
unitoneai/securityskills
51
39
firewall-review Performs a structured firewall rule base audit against CIS Controls v8 (Controls 4.4 and 4.5) and NIST SP 800-41 Rev …
unitoneai/securityskills
50
40
gcp-review Performs a GCP security posture review against the CIS Google Cloud Platform Foundation Benchmark v2.0.0. Auto-invoke…
unitoneai/securityskills
50
41
nist-csf-assessment Performs a NIST Cybersecurity Framework 2.0 assessment across all six functions (Govern, Identify, Protect, Detect, R…
unitoneai/securityskills
50
42
post-incident-review Conducts a structured post-incident review following NIST SP 800-61 Rev 2 Post-Incident Activity guidance. Auto-invok…
unitoneai/securityskills
50
43
hipaa-review Performs a HIPAA Security Rule compliance review against all Administrative, Physical, and Technical Safeguards defin…
unitoneai/securityskills
49
44
pci-dss-review Performs a PCI DSS v4.0 compliance review across all 12 requirements and their sub-requirements. Auto-invoked when di…
unitoneai/securityskills
49
45
siem-rules Guides development of SIEM detection rules using KQL (Microsoft Sentinel) and SPL (Splunk) query languages, mapped to…
unitoneai/securityskills
49
46
appsec-engineer Application Security Engineer role bundle for security design, testing, and code review of applications. Orchestrates…
unitoneai/securityskills
11
47
cloud-security-engineer Cloud Security Engineer role bundle for cloud security posture management, IaC review, container security, and identi…
unitoneai/securityskills
11
48
security-engineer Security Engineer role bundle for building security into products and infrastructure. Orchestrates code review, pipel…
unitoneai/securityskills
11
49
soc-analyst SOC Analyst role bundle covering Tier 1 through Tier 3 operations. Orchestrates alert triage, threat hunting, inciden…
unitoneai/securityskills
11
50
vciso Virtual CISO role bundle for organizations without a full-time CISO. Orchestrates security program assessment, compli…
unitoneai/securityskills
11