security-skills-guide

# Security Skills Guide

## Scope

Use this skill when:

- Finding or adding security-related skills
- Understanding cybersecurity skill categories
- Organizing security skills in README.md

## Security Skill Categories

### Penetration Testing

| Category | Skills |
|----------|--------|
| Web Application | Burp Suite, FFUF fuzzing, SQL injection, XSS testing |
| Network | Nmap, Wireshark, SMTP/SSH testing |
| Cloud | AWS/Azure/GCP penetration testing |
| Active Directory | Kerberoasting, DCSync, pass-the-hash |

### Code Auditing

| Category | Skills |
|----------|--------|
| Static Analysis | CodeQL, Semgrep, Slither |
| Smart Contracts | Solidity security, Move auditing |
| Variant Analysis | Finding similar vulnerabilities |

### Threat Hunting

| Category | Skills |
|----------|--------|
| Detection Rules | Sigma rules, YARA |
| Forensics | File metadata, memory analysis |
| Incident Response | Triage, investigation |

## Key Security Skill Repositories

### Trail of Bits Security Team
- `trailofbits/skills` - Static analysis, code auditing, smart contracts

### Antigravity Collection
- `sickn33/antigravity-awesome-skills` - 50+ cybersecurity skills

### Community Skills
- `mhattingpete/claude-skills-marketplace` - Computer forensics skills

## Where to Add Security Skills in README

- **Penetration testing tools**: `Cybersecurity & Penetration Testing`
- **Code analysis tools**: `Security & Systems` or `Development & Code Tools`
- **Threat hunting**: `Security & Systems`
- **Smart contract security**: `Development & Code Tools` (if dev-focused)

## Security Skill Best Practices

1. **Clear scope**: Define what the skill does and doesn't do
2. **Legal warnings**: Include responsible use disclaimers
3. **Tool requirements**: List required external tools
4. **Safe defaults**: Use non-destructive operations by default
5. **Logging**: Include audit trail capabilities

## Example Security Skill Structure

```
threat-hunting/
├── SKILL.md           # Main instructions
├── scripts/
│   ├── sigma-search.py
│   └── log-parser.sh
├── references/
│   └── sigma-rules.md
└── templates/
    └── report.md
```