AegisSkills
24 defensive security skills in 5 families. Every skill is free to copy as a single-file prompt, download as a zip, install into your coding assistant, or read over MCP.
application-securityApplication security assessment workflow covering threat modelling, static analysis, dependency auditing, API security, and security…Domain Defence5 phasesattack-surface-mappingAttack surface mapping and exposure analysis workflowThreat Intel5 phasescomplianceEnd-to-end security compliance workflow covering scope definition, regulatory mapping, control assessment, evidence collection, and…Governance & Risk5 phasesdata-loss-preventionCross-layer data loss prevention (DLP) programme covering data classification and discovery, network egress and DNS exfiltration con…Domain Defence6 phasesdeception-engineeringEnd-to-end deception engineering workflow for defensive security programsDomain Defence6 phasesdigital-forensicsEnd-to-end digital forensics and incident response (DFIR) workflowResponse & Analysis6 phasesendpoint-securityEndpoint security workflow covering EDR deployment, baseline hardening, malware analysis, and endpoint incident responseDomain Defence5 phasesexposure-validationContinuous exposure validation (CTEM) — prove which vulnerabilities are actually exposed, exploitable and impactful in an authorized…Threat Intel6 phasesgovernanceSecurity governance programme design and managementGovernance & Risk4 phasesidentity-access-managementComprehensive IAM programme covering identity governance (Joiners/Movers/Leavers), human authentication (FIDO2, SSO, passwordless),…Domain Defence6 phasesinfrastructure-securityInfrastructure security assessment workflow covering asset discovery, configuration baseline, patch management, hardening controls,…Domain Defence5 phasesmalware-analysisComprehensive malware analysis workflow from sample triage through intelligence reportingResponse & Analysis6 phasesmitre-atlasMITRE ATLAS adversarial ML/AI attack surface assessment and countermeasure planning workflowFrameworks5 phasesmitre-attackMITRE ATT&CK threat modelling workflowFrameworks3 phasesmitre-engageMITRE Engage adversary engagement and deception planning workflowFrameworks2 phasesnetwork-securityNetwork security assessment and hardening workflowDomain Defence5 phasesoperational-technologyOT/ICS security programme covering asset discovery, risk assessment, network security (ISA/IEC 62443 zone and conduit model), incide…Domain Defence7 phasesreverse-engineeringEnd-to-end binary reverse engineering workflow for security analystsResponse & Analysis5 phasesrisk-managementEnd-to-end information security risk management programme covering risk identification, qualitative and quantitative assessment (FAI…Governance & Risk6 phasessecurity-documentationSecurity documentation authoring workflow for policies, runbooks, and incident response templatesGovernance & Risk3 phasessecurity-operationsFull security operations workflow covering the complete SOC operating model — from alert triage through threat intelligence, vulnera…Response & Analysis9 phasesthreat-huntingProactive threat hunting workflowThreat Intel5 phasesthreat-intel-synthesisTurn raw threat intelligence — news feeds, knowledge graphs, vendor advisories, and incident teardowns — into structured attack patt…Threat Intel6 phasesthreat-modelingStructured threat modelling workflow using STRIDE and PASTA methodologiesThreat Intel4 phases