Rock Lambros
Community@rocklambros
Agent Skills by Rock Lambros
Showing 105 vetted skills indexed across 1 GitHub repositories.
rocklambrosscaffolding-red-team-engagement
Scaffold AI red-team engagement documents including Rules of Engagement, scope, kill-switch, logging, and disclosure.
rocklambrosrunning-cloud-ir-runbook
Coordinate cloud incident response across AWS, GCP, and Azure.
rocklambrosauditing-mcp-server-pre-trust
Audit MCP servers for license, provenance, network, and tool safety before trust.
rocklambroswriting-pentest-finding
Generate client-deliverable penetration-test findings with CVSS v3.1 vectors and remediation.
rocklambrosscaffolding-ai-policy-doc
Draft an organization-wide AI use policy package with acceptable-use rules and oversight tiers.
rocklambrosapplying-secure-coding-rules
Apply user-supplied secure-coding rule corpora to target repositories with per-finding citations.
rocklambrosauditing-pinned-dependencies
Detect unpinned dependency installs and mutable build inputs in repositories.
rocklambrosinterpreting-vendor-questionnaire-skeptically
Review vendor security questionnaire responses for evidence gaps, contradictions, and stale claims.
rocklambrostriaging-vulnerability-findings
Rank SARIF vulnerability findings by severity and reachability for multi-scanner triage.
rocklambrosthreat-modeling-agentic-systems
Map MAESTRO, MITRE ATLAS, or OWASP catalog items to agentic trust boundaries.
rocklambrosrunning-multiturn-attack-suite
Evaluate multi-turn attack suites against stateful LLM applications.
rocklambroswriting-vdp-and-coordinated-disclosure
Draft vulnerability disclosure policies and coordinated-disclosure materials with RFC 9116 security.txt output.
rocklambrosrunning-encoded-payload-suite
Audit deployed LLM safety filters for encoding-based bypasses.
rocklambrosverifying-training-data-erasure
Verify training-data erasure across ML pipeline stages and assemble DSR proof bundles.
rocklambrosverifying-sigstore-signatures
Verify Sigstore signatures and SLSA provenance for digest-pinned artifacts.
rocklambrosscaffolding-ctf-engagement
Scaffold authorized offensive-security engagement documentation with rules, scope, and severity rubric.
rocklambrosauditing-graphql-nullability
Audit GraphQL schemas for over-permissive nullability and recommend SDL fixes.
rocklambrosthreat-modeling-llm-app
Analyze LLM applications against a threat catalog to produce STRIDE-classified threat models.
rocklambrosrunning-prompt-injection-eval
Run prompt-injection evaluations against deployed LLM endpoints with structured logging.
rocklambrosauditing-transitive-vulnerabilities
Audit transitive dependency vulnerabilities in SBOMs and lockfiles with reachability analysis.
rocklambrosgenerating-sbom
Generate validated CycloneDX or SPDX SBOMs from resolved lockfiles.
rocklambroswriting-decision-trees-as-skills
Convert decision trees into SKILL.md files with numbered predicates and explicit branches.
rocklambroswriting-deny-allow-rules
Create auditable YAML rule files for Claude Code permissions and action gating.
rocklambrosauthoring-tool-hook
Design Claude Code hooks for runtime policy enforcement and event logging.