24의 큐레이터 컬렉션 SKILL.md 보안 작업에 대한 기능 — 공격 보안, SOC 및 탐지 엔지니어링, 클라우드 및 Kubernetes 경화, DFIR, 위협 인텔, 안전한 프로그래밍, 역 공학, 신속한 개선 및 다국어 통신.

같은 기술은 세 에이전트에 실행: Gemini CLI, Claude Code, **OpenAI Codex **. 1개의 운하 skills/ 나무가 있습니다; 각 플랫폼은 읽습니다 얇은 어댑터를 통해.

저장소 URL:

포함되는 것

이 저장소에는 아래 그룹화 된 24 기술이 포함되어 있습니다.

사이버 보안 자동화

• gemini-tool-orchestrator: 자연적인 언어 intent를 안전한 번역하십시오, nmap, nuclei, ffuf, semgrep, trivy 및 친구의 범위를 갖는 파이프라인.
• ai-redteam: Evaluate 신속한 주입, 탈옥, 공구 남용, 대리인 당신이 소유하는 LLM 및 대리인 체계에 hijack 및 RAG 독.
• threat-intel-fusion: 수집, 정상화, enrich, dedupe 및 우선화 IOC 및 배우는 STIX, Sigma, YARA, Blocklists로 프로필을 만듭니다.
• cloud-security-automation: AWS, Azure, GCP 자세, IaC 스캔 및 drift-and-fix 워크플로우는 코드로 배송되며 콘솔을 클릭하지 않습니다.
• detection-engineering: 저자 및 조정 시그마, YARA, Suricata, KQL, SPL,

Trident SecOps Skills

A curated collection of 24 SKILL.md capabilities for security work — offensive security, SOC and detection engineering, cloud and Kubernetes hardening, DFIR, threat intel, secure programming, reverse engineering, prompt improvement, and multilingual communication.

The same skills run on three agents: Gemini CLI, Claude Code, and OpenAI Codex. There is one canonical skills/ tree; each platform reads it through a thin adapter.

Repository URL:

https://github.com/Garyson26/Trident-SecOps-Skills

What is included

This repository contains 24 skills, grouped below.

Cyber security automation

• gemini-tool-orchestrator: Translate natural-language intent into safe, scoped pipelines of nmap, nuclei, ffuf, semgrep, trivy, and friends.
• ai-redteam: Evaluate prompt injection, jailbreak, tool abuse, agent hijack, and RAG poisoning on LLM and agent systems you own.
• threat-intel-fusion: Collect, normalize, enrich, dedupe, and prioritize IOCs and actor profiles into STIX, Sigma, YARA, and blocklists.
• cloud-security-automation: AWS, Azure, GCP posture, IaC scanning, and drift-and-fix workflows shipped as code, not console clicks.
• detection-engineering: Author and tune Sigma, YARA, Suricata, KQL, SPL, and EQL detections with ATT&CK coverage and tests.
• kubernetes-security: Cluster hardening, admission control with Gatekeeper/Kyverno, runtime defense, and signed-image supply chain.
• purple-team-automation: Link Atomic Red Team, Caldera, and Stratus emulation to detection validation and coverage scoring.
• osint-recon-automation: Passive recon, asset graphing, and exposure monitoring for authorized scopes only.
• api-security-automation: REST, GraphQL, and gRPC assessment covering OWASP API Top 10, JWT abuse, BOLA, mass assignment, and replay.
• forensics-triage: DFIR across disk, memory, network, cloud, and identity with defensible timelines and chain of custody.
• bug-bounty-workflow: Scope-aware recon, dedupe, and high-signal reporting for HackerOne, Bugcrowd, Intigriti, and YesWeHack.
• smart-contract-audit: Solidity, Vyper, and Move audit with Slither, Foundry, Echidna, invariants, MEV, and bridge risk.

Core security

• offensive-security: Plan authorized offensive security assessments.
• exploit-development: Analyze lab vulnerabilities and safe proof of concept workflows.
• malware-reverse-engineering: Triage suspicious artifacts and produce defensive findings.
• devsecops: Harden CI/CD, infrastructure, containers, and releases.
• soc-operations: Triage alerts, hunt threats, and produce incident notes.
• cybersecurity-partner: Act as a practical security reviewer and advisor.

Engineering and language

• go-programming: Build, debug, test, and review idiomatic Go systems.
• python-programming: Build, test, type, package, and maintain Python code.