security

---
name: security
description: Cybersecurity, compliance, access control, application security, and threat management skills. SOC 2, ISO 27001, threat modeling, incident response, security hardening. Triggers on: security, compliance, SOC 2, ISO 27001, threat model, incident response, hardening, IAM, zero trust, audit.
license: MIT
compatibility: Works with Claude Code, Cursor, or any compatible AI coding agent.
allowed-tools: Read Write Edit Bash Grep
metadata:
  author: fatihkan
  homepage: https://github.com/fatihkan/badi-skills/tree/main/skills/security
  badi-version: ">=1.14.0"
  category: security
---
# Security Skills
This file contains all the skills across cybersecurity, compliance, access control, application security, and threat management.

---

### vulnerability-assessment
Systematically detects and prioritizes vulnerabilities in systems and applications.

---

### penetration-test-plan
Builds the penetration test scope, methodology, and execution plan.

---

### security-audit-checklist
Builds the checklist for a comprehensive security audit and manages the audit process.

---

### compliance-mapping
Achieves compliance by mapping legal and industry requirements to technical controls.

---

### access-control-design
Designs the access-control model and policies based on the least-privilege principle.

---

### encryption-strategy
Protects data at rest and in transit by building the data-encryption strategy.

---

### incident-response-plan
Builds the comprehensive plan defining the response process for cybersecurity incidents.

---

### threat-modeling
Identifies potential attack vectors by applying threat-modeling methodology.

---

### security-training-plan
Designs the security awareness and competence training program for the organization.

---

### api-security-review
Detects gaps and risks by auditing API security comprehensively.

---

### zero-trust-architecture
Transforms the network-security approach by applying Zero Trust principles.

---

### data-classification
Builds the policy classifying organizational data by sensitivity level.

---

### privacy-impact-assessment
Runs privacy impact assessments (DPIA) for personal-data processing.

---

### security-policy-writing
Writes and updates organizational information-security policies.

---

### waf-configuration-security
Protects web applications by configuring the Web Application Firewall with a security focus.

---

### ddos-mitigation
Builds the mitigation strategy and procedures against DDoS attacks.

---

### supply-chain-security
Manages third-party risk by building the software supply-chain security strategy.

---

### container-security
Secures container and container-orchestration environments.

---

### cloud-security-posture
Audits the cloud environment's security posture with Cloud Security Posture Management (CSPM).

---

### jwt-implementation
Designs JSON Web Token (JWT) based authentication and authorization securely.

---

### oauth-design
Designs and implements OAuth 2.0 authorization flows securely.

---

### saml-integration
Configures and secures SAML-based single sign-on (SSO) integration.

---

### mfa-strategy
Raises account security by designing the multi-factor authentication (MFA) strategy.

---

### password-policy
Delivers authentication security by building a strong password policy.

---

### certificate-management-security
Plans the digital-certificate lifecycle from a security perspective.

---

### log-auditing
Detects anomalies and security events by auditing security logs.

---

### siem-configuration
Configures and optimizes the Security Information and Event Management (SIEM) system.

---

### soar-automation
Automates security operations with Security Orchestration, Automation and Response (SOAR).

---

### security-monitoring
Builds threat-detection capacity by designing a 24/7 security-monitoring strategy.

---

### vulnerability-scanning
Detects security gaps proactively by building a regular vulnerability-scanning program.

---

### patch-management
Builds the process for applying software and system patches on time and safely.

---

### network-segmentation
Limits lateral movement by shrinking the attack surface through network segmentation.

---

### vpn-configuration
Provides remote access and site-to-site connectivity by configuring VPN infrastructure securely.

---

### firewall-rules
Designs and manages the firewall rule set per best practices.

---

### endpoint-protection
Protects devices by building the endpoint security strategy.

---

### mobile-security
Builds the mobile device and application security strategy.

---

### web-application-security
Assesses and improves web application security comprehensively.

---

### xss-prevention
Develops the protection strategy and application controls against Cross-Site Scripting (XSS).

---

### sql-injection-prevention
Applies the protection strategy against SQL Injection attacks.

---

### csrf-protection
Applies protection mechanisms against Cross-Site Request Forgery (CSRF).

---

### file-upload-security
Prevents malicious uploads by securing file-upload functionality.

---

### session-management
Protects against session-hijacking attacks by securing session management.

---

### rate-limiting-security
Limits brute force and malicious traffic through rate limiting.

---

### cors-configuration
Builds the Cross-Origin Resource Sharing (CORS) configuration securely.

---

### csp-header
Protects against XSS and data-injection attacks by configuring the Content Security Policy header.

---

### hsts-configuration
Enforces HTTPS by configuring the HTTP Strict Transport Security header.

---

### security-headers
Configures all HTTP security headers comprehensively.

---

### penetration-report
Presents penetration-test results in a professional report format.

---

### security-awareness
Reduces human-driven risk by designing the employee security-awareness program.

---

### kvkk-compliance
Manages the compliance process for KVKK (the Turkish Personal Data Protection Law).