security▌

### cloud-agent-security - Review supplied cloud deployment, IAM, workload identity, network, and logging configuration for AI agents and tool services. Trace effectiv - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### agent-transport-security - Review TLS, peer validation, credential forwarding, token verification, and cryptographic configuration protecting AI-provider, MCP, agent-c - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### api-auth-security - Review API authentication and authorization used by AI agents, tools, and application backends. Trace caller identity, tenant and object acc - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### cicd-agent-security - Review CI/CD workflows that run AI agents, install agent tooling, or publish their changes. Trace untrusted triggers, code checkout, shell i - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### agent-incident-response - Triage a suspected AI agent security incident from supplied logs, repository evidence, configuration, and timelines. Preserve evidence, dist - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### container-sandbox-security - Review supplied Docker, Compose, Kubernetes, and agent sandbox configuration for host exposure, privilege, writable mounts, network reach, a - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-shellcode - Shellcode development reference for offensive security engagements. Use when writing custom x86/x64 shellcode, implementing position-indepen - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### ai-asset-scanner - Discover and review AI assets in a supplied repository or exported inventory, including agents, model dependencies, prompts, MCP integration - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-advanced-redteam - Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting. Addresses engagement scopi - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.

### offensive-iot - IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C EEPROM, eMMC chip-off) - Practical, repeatable guidance for authorized security work. - Includes procedures, checks, and references for this skill.