Security Skill
Capabilities
Reconnaissance
- Subdomain enumeration
- DNS analysis
- WHOIS lookup
- Port scanning
- ASN mapping
- Technology fingerprinting
Web Assessment (OWASP)
- Authentication testing
- Authorization testing
- Input validation
- Session management
- Error handling
- Cryptography review
Threat Modeling
- STRIDE framework
- Attack surface mapping
- Risk assessment matrix
- Mitigation recommendations
Tools
Use these CLI tools when available:
nmap— Port scanningffuf— Web fuzzingdig/whois— DNS/WHOIScurl— HTTP testingjq— JSON parsing
Rules
- Only perform authorized testing
- Document all findings with evidence
- Rate severity: Critical > High > Medium > Low > Info
- Provide remediation for each finding