defensive-opsec

Name: defensive-opsec
Availability: InStock
Author: riparino

Detect credential leaks, subdomain exposure, and DNS misconfigurations across cloud services and code repositories.

1|Updated Apr 27, 2026

Search Tags:#github-secrets #credential-leaks #opsec #certificate-transparency #subdomain-exposure #dns-security

Ready to run

npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-opsec

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: defensive-opsec
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Blue/Skills/defensive-opsec
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-opsec

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Protect organizations from credential leaks, subdomain exposure, and sensitive data leakage across cloud services and code repositories by implementing monitoring and remediation workflows.

Core Features & Use Cases

Credential leak monitoring across code repos and identity stores; certificate transparency checks; DNS zone transfer controls.
Subdomain exposure detection via certificate transparency and external reconnaissance; rapid remediation and policy enforcement.
GitHub secret scanning integration with pre-commit hooks and incident response playbooks for compromised credentials.

Quick Start

Monitor credential leaks, subdomain exposure, and DNS exposure and immediately apply remediation steps.

Frequently Asked Questions about defensive-opsec

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect credential leaks and subdomain exposure across cloud services?▼

Detect credential leaks and subdomain exposure by applying certificate transparency checks via crt.sh, scanning GitHub repos with TruffleHog or GitLeaks, and reviewing Entra ID SigninLogs to identify compromised credentials across cloud services.

What is the best way to prevent DNS zone transfer vulnerabilities?▼

Prevent DNS zone transfer vulnerabilities by reviewing DNS AXFR controls and configurations to detect and block unauthorized external reconnaissance, reducing the organization's attack surface exposure.

How does certificate transparency monitoring work for subdomain exposure?▼

Certificate transparency monitoring works by querying crt.sh to track issued certificates, detecting newly exposed subdomains from external reconnaissance, and triggering rapid remediation to enforce security policies.

Can I use TruffleHog and GitLeaks for GitHub secret scanning integration?▼

Yes, you can use TruffleHog and GitLeaks for GitHub secret scanning, integrating them with pre-commit hooks and incident response playbooks to remediate compromised credentials in code repositories.

Why do I need to monitor Entra ID SigninLogs for OPSEC?▼

Monitor Entra ID SigninLogs for OPSEC to detect active exploitation of leaked credentials, correlate identity-based anomalies with code repository exposures, and initiate rapid incident response workflows.

What are the limitations of certificate transparency checks for attack surface reduction?▼

Certificate transparency checks only reveal subdomains with issued certificates and may miss non-SSL assets, requiring supplementary DNS configuration reviews and AXFR controls for comprehensive attack surface reduction.