Red Hat Product Security
Official@redhatproductsecurity
Red Hat Product Security
Agent Skills by Red Hat Product Security
Showing 135 vetted skills indexed across 2 GitHub repositories.
RedHatProductSecurityprotected-resource-metadata
Implement or review OAuth 2.0 Protected Resource Metadata in MCP servers.
RedHatProductSecurityaddress-sanitizer
Detect memory safety violations in C/C++ applications during fuzz testing.
RedHatProductSecurityagent-identity
Guide AI agent identity implementation with SPIFFE IDs and service accounts.
RedHatProductSecuritymodel-registry-secure-storage
Enforce authentication, authorization, encryption, and auditing for model registry storage.
RedHatProductSecurityhardening-remote
Secure remote MCP servers with TLS, network segmentation, and certificate verification.
RedHatProductSecurityreact-security
Identify XSS vulnerabilities and unsafe HTML or URL handling in React applications.
RedHatProductSecurityno-credential-forwarding
Enforce separate non-user credentials for downstream API access in MCP servers.
RedHatProductSecurityrbac
Map token claims to internal roles for MCP server authorization.
RedHatProductSecurityharness-writing
Generate fuzzing harness templates for C++, Rust, and other languages.
RedHatProductSecurityhealth-probes
Configure Kubernetes liveness, readiness, and startup probes with lifecycle hooks.
RedHatProductSecurityinternal-application-routing
Route internal application requests through a designated API gateway.
RedHatProductSecurityroots-support
Validate MCP servers enforce declared filesystem root boundaries.
RedHatProductSecuritymcp-client-protected-resource-metadata
Parse OAuth 2.0 Protected Resource Metadata for MCP client authorization server discovery.
RedHatProductSecuritymodel-registry-model-security-scanning
Detect malicious components in registry models using signature scanning and metadata analysis.
RedHatProductSecurityaudit-context-building
Analyze source code line-by-line to track invariants, assumptions, and data flows.
RedHatProductSecurityzeroize-audit
Audit C, C++, and Rust code for missing or compiler-eliminated zeroization.
RedHatProductSecurityagent-to-agent-auth
Configure SPIFFE/SPIRE and mTLS for authenticated agent communication.
RedHatProductSecurityoauth21-implementation
Implement OAuth 2.1 authorization servers with PKCE and token rotation.
RedHatProductSecurityrequest-validation
Validates and filters API requests at the gateway to prevent exploits.
RedHatProductSecurityaflpp
Run parallel fuzz testing campaigns for C/C++ applications with sanitizers.
RedHatProductSecurityclient-side-security
Review browser-facing code for security vulnerabilities and compliance.
RedHatProductSecuritylibfuzzer
Automate fuzz testing of C/C++ projects with LLVM's libFuzzer.
RedHatProductSecuritysafe-c-functions
Analyze C and C++ source code to replace insecure memory and string functions.
RedHatProductSecurityapache-camel-security
Configures and audits layered security features for Apache Camel routes.
Frequently Asked Questions About Red Hat Product Security
FAQPage SchemaWhat specific security tasks are enabled by these capabilities?▼
These capabilities enable rigorous vulnerability detection through fuzzing, secure identity management via OAuth 2.1 and SPIFFE, container hardening, and automated static analysis of source code to identify injection flaws and memory safety issues.
Which technical personas benefit from these security implementations?▼
Security engineers, platform architects, and software developers working on high-assurance distributed systems, containerized infrastructure, or cryptographic protocols will find these resources essential for maintaining compliance and reducing attack surfaces.
What are the primary dependencies for implementing these security controls?▼
Implementation typically requires standard Linux-based container runtimes, OpenShift or Kubernetes environments, and support for modern authentication protocols like OIDC and OAuth 2.1. Specific fuzzing tasks require LLVM-based compilers and instrumentation support.