miosa-osa/osa

miosa-osa/osa · canopy/backend/AGENTS.md

miosa-osa/osa · examples/skills/code-review/SKILL.md · Analyze pull requests and diffs for bugs, security vulnerabilities, performance issues, style violations, and test…

miosa-osa/osa · examples/skills/content-writer/SKILL.md · Draft blog posts, social media content, email campaigns, and marketing copy

miosa-osa/osa · examples/skills/customer-support/SKILL.md · Triage incoming support tickets, draft responses, detect customer sentiment, suggest knowledge base articles, and track…

miosa-osa/osa · examples/skills/daily-briefing/SKILL.md · Generate a morning business briefing with weather, calendar, news, and task priorities

miosa-osa/osa · examples/skills/email-assistant/SKILL.md · Triage inbox, flag urgent emails, summarize threads, and draft replies

miosa-osa/osa · examples/skills/meeting-prep/SKILL.md · Research attendees, prepare talking points, and summarize previous interactions before meetings

miosa-osa/osa · examples/skills/research-assistant/SKILL.md · Conduct deep, multi-source research on technologies, companies, markets, and topics — synthesizing findings into…

miosa-osa/osa · examples/skills/sales-pipeline/SKILL.md · Monitor sales pipeline, track deals, send follow-up reminders, and forecast revenue

miosa-osa/osa · priv/skills/arsenal-tool-validation/SKILL.md · Tool-arsenal validation and risk gating for offensive engagements: risk-tier classification of tools…

miosa-osa/osa · priv/skills/attack-simulation/SKILL.md · Run cyber defense attack simulations against isolated lab targets, compare detection gaps, apply a lab patch and rerun…

miosa-osa/osa · priv/skills/code-review/SKILL.md · Analyze pull requests and diffs for bugs, security vulnerabilities, performance issues, style violations, and test…

miosa-osa/osa · priv/skills/content-writer/SKILL.md · Draft blog posts, social media content, email campaigns, and marketing copy

miosa-osa/osa · priv/skills/customer-support/SKILL.md · Triage incoming support tickets, draft responses, detect customer sentiment, suggest knowledge base articles, and track…

miosa-osa/osa · priv/skills/cve-hunt-benchmark-harness/SKILL.md · Ground-truth vulnerability-hunting benchmarks: challenge definitions with known-vulnerable targets, ground-truth…

miosa-osa/osa · priv/skills/daily-briefing/SKILL.md · Generate a morning business briefing with weather, calendar, news, and task priorities

miosa-osa/osa · priv/skills/detection-engineering/SKILL.md · Build and validate cyber defense detection rules with malicious and benign fixtures, telemetry prerequisites and false…

miosa-osa/osa · priv/skills/dfir-incident-toolkit/SKILL.md · Digital forensics and incident response workflow: read-only evidence acquisition with SHA-256 integrity records, typed…

miosa-osa/osa · priv/skills/diagnosing-bugs/SKILL.md · Diagnose broken, failing, incorrect, flaky, or unexpectedly slow software. Use whenever a user reports a bug…

miosa-osa/osa · priv/skills/elixir-otp/SKILL.md · Write, review, and repair Elixir or Erlang code with verified syntax, exact API arities, OTP lifecycle handling, and…

miosa-osa/osa · priv/skills/email-assistant/SKILL.md · Triage inbox, flag urgent emails, summarize threads, and draft replies

miosa-osa/osa · priv/skills/email-security/SKILL.md · Analyze suspicious email headers and attachments without opening active content, distinguish trusted authentication…

miosa-osa/osa · priv/skills/endpoint-hardening/SKILL.md · Assess host service permissions and defensive configuration, prepare reversible hardening and verify normal behavior…

miosa-osa/osa · priv/skills/evidence-vault-chain-of-custody/SKILL.md · Evidence management for security engagements: chain-of-custody records with SHA-256 integrity, the provenance-strict…

miosa-osa/osa · priv/skills/fleet-orchestration/SKILL.md · Decompose a large task into DISJOINT file-owned workstreams, fan out isolated full-power peers, collect structured…

miosa-osa/osa · priv/skills/frontend-quality/SKILL.md · Build, debug, review, or polish user interfaces with responsive layout, accessibility, and pixel-level visual…

miosa-osa/osa · priv/skills/honeytokens-deception/SKILL.md · Honeytoken design and deployment for detecting intrusion attempts: token kinds (opaque, API-key-shaped…

miosa-osa/osa · priv/skills/implementation/SKILL.md · Implement a requested feature or change completely in an existing codebase. Use for multi-file coding tasks…

miosa-osa/osa · priv/skills/incident-response/SKILL.md · Investigate suspected compromise, preserve incident evidence, build a timeline and plan containment, recovery and…

miosa-osa/osa · priv/skills/log-analysis/SKILL.md · Normalize and correlate security logs into an evidence-backed timeline while preserving timestamps and parse errors…

miosa-osa/osa · priv/skills/meeting-prep/SKILL.md · Research attendees, prepare talking points, and summarize previous interactions before meetings

miosa-osa/osa · priv/skills/merge-reconciler/SKILL.md · Recover the work a fleet wave dropped when two parallel nodes edited the same file — read each claimant's version out…

miosa-osa/osa · priv/skills/network-defense/SKILL.md · Review network exposure, firewall policy and IDS evidence, then validate defensive changes with permitted and denied…

miosa-osa/osa · priv/skills/offensive-active-directory/SKILL.md · Active Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound…

miosa-osa/osa · priv/skills/offensive-advanced-redteam/SKILL.md · Comprehensive red team operations methodology covering full engagement lifecycle from planning through reporting…

miosa-osa/osa · priv/skills/offensive-ai-security/SKILL.md · AI/LLM security offensive checklist: prompt injection, jailbreaking, model extraction, training data poisoning…

miosa-osa/osa · priv/skills/offensive-anti-forensics/SKILL.md · Anti-forensics and evidence destruction techniques for red team operators conducting authorized engagements. Covers log…

miosa-osa/osa · priv/skills/offensive-api-abuse/SKILL.md · Advanced API exploitation methodology focused on business logic abuse and sophisticated attack patterns that bypass…

miosa-osa/osa · priv/skills/offensive-api-security/SKILL.md · Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full…

miosa-osa/osa · priv/skills/offensive-basic-exploitation/SKILL.md · Week 5 exploit development curriculum. Foundational exploitation techniques: controlling EIP/RIP, ROP chain…

miosa-osa/osa · priv/skills/offensive-bluetooth-ble/SKILL.md · Bluetooth Low Energy (BLE) attack methodology — GATT enumeration, characteristic read/write without auth, pairing…

miosa-osa/osa · priv/skills/offensive-bluetooth-classic/SKILL.md · Bluetooth Classic (BR/EDR) attack methodology — device discovery, service enumeration via SDP, LMP/L2CAP layer attacks…

miosa-osa/osa · priv/skills/offensive-bug-identification/SKILL.md · Systematic bug identification methodology: source code review patterns, black-box testing strategies, taint analysis…

miosa-osa/osa · priv/skills/offensive-business-logic/SKILL.md · Business logic vulnerability testing for web/mobile/API engagements. Covers workflow bypass, state machine violations…

miosa-osa/osa · priv/skills/offensive-c2-frameworks/SKILL.md · Command and Control framework deployment, configuration, and operational tradecraft for red team engagements. Covers…

miosa-osa/osa · priv/skills/offensive-cicd-pipeline/SKILL.md · Comprehensive CI/CD pipeline exploitation methodology covering GitHub Actions injection vectors (expression injection…

miosa-osa/osa · priv/skills/offensive-cicd-secrets/SKILL.md · Comprehensive secrets extraction methodology targeting CI/CD environments across all major platforms. Covers…

miosa-osa/osa · priv/skills/offensive-cloud/SKILL.md · Cloud security attack methodology covering AWS, Azure, and GCP. Includes credential harvesting (IMDS, ~/.aws, env vars…

miosa-osa/osa · priv/skills/offensive-container-escape/SKILL.md · Container escape and breakout techniques targeting Docker, containerd, and Podman runtimes. Covers privileged container…

miosa-osa/osa · priv/skills/offensive-crash-analysis/SKILL.md · Week 4 exploit development curriculum. Crash triage and analysis methodology: WinDbg/GDB analysis, ASAN/MSAN output…

miosa-osa/osa · priv/skills/offensive-crypto-attacks/SKILL.md · Systematic methodology for identifying and exploiting cryptographic implementation weaknesses in real-world…

miosa-osa/osa · priv/skills/offensive-data-exfiltration/SKILL.md · Dense methodology covering DNS exfiltration (dnscat2, iodine, dns2tcp), HTTPS tunneling (domain fronting, CDN abuse…

miosa-osa/osa · priv/skills/offensive-deauth-disassoc/SKILL.md · Deauthentication and disassociation attacks against 802.11 networks — targeted single-client deauth for handshake…

miosa-osa/osa · priv/skills/offensive-dependency-confusion/SKILL.md · Deep-dive offensive methodology for dependency confusion and namespace attacks across all major package ecosystems…

miosa-osa/osa · priv/skills/offensive-deserialization/SKILL.md · Insecure deserialization exploitation across Java, PHP, .NET, Python, Node.js, and Ruby. Covers gadget chain…

miosa-osa/osa · priv/skills/offensive-edr-evasion/SKILL.md · EDR evasion offensive checklist: hook unhooking (user/kernel), direct syscalls, PPID spoofing, process injection…

miosa-osa/osa · priv/skills/offensive-evil-twin/SKILL.md · Evil Twin / KARMA / Mana access point methodology — rogue AP construction with hostapd-mana / wifiphisher / airgeddon…

miosa-osa/osa · priv/skills/offensive-exploit-dev-course/SKILL.md · Full exploit development course roadmap and syllabus: weekly topics, recommended reading, lab setup, and learning path…

miosa-osa/osa · priv/skills/offensive-exploit-development/SKILL.md · Exploit development operational guide: environment setup, debugging workflow, PoC development lifecycle, writing…

miosa-osa/osa · priv/skills/offensive-fast-checking/SKILL.md · Speed-optimized offensive checklist for rapid assessment: quick-win vulnerability patterns, fast recon shortcuts…

miosa-osa/osa · priv/skills/offensive-file-upload/SKILL.md · File upload vulnerability checklist: MIME type bypass, extension bypass, magic byte manipulation, path traversal in…

miosa-osa/osa · priv/skills/offensive-fuzzing-course/SKILL.md · Week 2 of the exploit development curriculum. Covers fuzzing methodology: target selection, corpus generation…

miosa-osa/osa · priv/skills/offensive-fuzzing/SKILL.md · Practical offensive fuzzing methodology covering target identification, fuzzer selection (AFL++, libFuzzer, Honggfuzz…

miosa-osa/osa · priv/skills/offensive-graphql/SKILL.md · Offensive methodology for attacking GraphQL APIs during penetration tests and bug bounty engagements. Covers the full…

miosa-osa/osa · priv/skills/offensive-idor/SKILL.md · IDOR (Insecure Direct Object Reference) testing checklist: object ID enumeration, horizontal/vertical privilege…

miosa-osa/osa · priv/skills/offensive-initial-access/SKILL.md · Initial access techniques checklist: phishing (spear/smishing), credential stuffing, exposed service exploitation…

miosa-osa/osa · priv/skills/offensive-iot/SKILL.md · IoT and embedded device security testing methodology. Covers hardware reconnaissance (UART, JTAG, SWD, SPI flash, I2C…

miosa-osa/osa · priv/skills/offensive-jwt/SKILL.md · JWT attack methodology for penetration testers. Covers algorithm confusion (alg:none, RS256→HS256), weak HMAC secret…

miosa-osa/osa · priv/skills/offensive-k8s-attacks/SKILL.md · Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide…

miosa-osa/osa · priv/skills/offensive-keylogger-arch/SKILL.md · Low-level keylogger architecture design: kernel driver hooks (WH_KEYBOARD_LL, SetWindowsHookEx), ETW-based input…

miosa-osa/osa · priv/skills/offensive-krack-fragattacks/SKILL.md · KRACK (CVE-2017-13077..082) and FragAttacks (CVE-2020-24586..588 + 26139-26147) — key reinstallation, fragmentation…

miosa-osa/osa · priv/skills/offensive-lateral-movement/SKILL.md · Comprehensive lateral movement tradecraft for authorized red team engagements covering credential-based movement…

miosa-osa/osa · priv/skills/offensive-linux-privesc/SKILL.md · Comprehensive Linux privilege escalation methodology for offensive security engagements. Covers the full attack surface…

miosa-osa/osa · priv/skills/offensive-lorawan-sub-ghz/SKILL.md · LoRaWAN and sub-GHz (433 / 868 / 915 MHz) attack methodology — LoRaWAN ABP/OTAA join attack, network/session key reuse…

miosa-osa/osa · priv/skills/offensive-mitigations/SKILL.md · Security mitigation reference and bypass catalog: ASLR, DEP/NX, RELRO, stack canaries, CFI, sandboxing, seccomp. Covers…

miosa-osa/osa · priv/skills/offensive-mobile/SKILL.md · Mobile (Android + iOS) application penetration testing methodology. Covers static analysis (apktool/jadx for Android…

miosa-osa/osa · priv/skills/offensive-network-attacks/SKILL.md · Dense description covering ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, DNS poisoning, MITM attacks, VLAN hopping, DHCP…

miosa-osa/osa · priv/skills/offensive-oauth/SKILL.md · OAuth 2.0 attack checklist: authorization code interception, redirect_uri bypass, CSRF on OAuth flow, state parameter…

miosa-osa/osa · priv/skills/offensive-open-redirect/SKILL.md · Open redirect vulnerability checklist: parameter identification, bypass techniques (URL encoding, double slashes, CRLF…

miosa-osa/osa · priv/skills/offensive-osint-methodology/SKILL.md · Structured OSINT methodology framework: target definition, source selection, collection workflows, data correlation…

miosa-osa/osa · priv/skills/offensive-parameter-pollution/SKILL.md · HTTP parameter pollution (HPP) checklist: duplicate parameter injection, backend vs frontend parsing differences, WAF…

miosa-osa/osa · priv/skills/offensive-persistence/SKILL.md · Comprehensive persistence tradecraft for authorized red team engagements covering Windows and Linux mechanisms. Windows…

miosa-osa/osa · priv/skills/offensive-phishing/SKILL.md · Phishing campaign execution methodology for authorized red team engagements. Covers end-to-end campaign lifecycle…

miosa-osa/osa · priv/skills/offensive-race-condition/SKILL.md · Race condition (TOCTOU) testing checklist: identifying timing windows, Burp Suite Turbo Intruder, Last-Byte sync…

miosa-osa/osa · priv/skills/offensive-rce/SKILL.md · Remote Code Execution testing checklist: OS command injection, SSTI-to-RCE, deserialization RCE, file upload RCE, XXE…

miosa-osa/osa · priv/skills/offensive-reporting/SKILL.md · Penetration test and red team report writing methodology. Covers executive summary structuring (risk-led narrative for…

miosa-osa/osa · priv/skills/offensive-request-smuggling/SKILL.md · HTTP request smuggling checklist: CL.TE, TE.CL, TE.TE variants, detection with timing and differential responses, WAF…

miosa-osa/osa · priv/skills/offensive-shellcode/SKILL.md · Shellcode development reference for offensive security engagements. Use when writing custom x86/x64 shellcode…

miosa-osa/osa · priv/skills/offensive-social-engineering/SKILL.md · Social engineering attack techniques beyond email phishing for authorized red team and physical penetration testing…

miosa-osa/osa · priv/skills/offensive-sqli/SKILL.md · SQL injection testing skill for offensive security assessments and bug bounty hunting. Covers error-based, UNION-based…

miosa-osa/osa · priv/skills/offensive-ssrf/SKILL.md · Server-Side Request Forgery testing checklist: SSRF discovery, blind SSRF with out-of-band, cloud metadata endpoints…

miosa-osa/osa · priv/skills/offensive-ssti/SKILL.md · Dense description covering Server-Side Template Injection across Jinja2, Twig, Freemarker, Velocity, Pebble, Smarty…

miosa-osa/osa · priv/skills/offensive-supply-chain/SKILL.md · Comprehensive offensive methodology for software supply chain attacks covering the full kill chain from reconnaissance…

miosa-osa/osa · priv/skills/offensive-tls-attacks/SKILL.md · Comprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network…

miosa-osa/osa · priv/skills/offensive-toctou/SKILL.md · Time-of-Check / Time-of-Use (TOCTOU) race condition exploitation methodology across binary, kernel, filesystem, web…

miosa-osa/osa · priv/skills/offensive-vuln-classes/SKILL.md · Exploit development curriculum covering core vulnerability classes with real-world CVE case studies: stack/heap buffer…

miosa-osa/osa · priv/skills/offensive-waf-bypass/SKILL.md · WAF bypass techniques checklist: encoding bypass (URL/HTML/Unicode/double encoding), case variation, comment injection…

miosa-osa/osa · priv/skills/offensive-wifi-recon/SKILL.md · Wi-Fi reconnaissance methodology — adapter selection, monitor mode and packet injection setup, regulatory domain…

miosa-osa/osa · priv/skills/offensive-wifi/SKILL.md · Wireless / 802.11 attack methodology for red team engagements and wireless security assessments. Covers monitor-mode…

miosa-osa/osa · priv/skills/offensive-windows-boundaries/SKILL.md · Windows security boundary taxonomy and attack surface enumeration: kernel/user boundary, sandbox boundaries (LPAC…

miosa-osa/osa · priv/skills/offensive-windows-mitigations/SKILL.md · Deep-dive on Windows exploit mitigations: ASLR, DEP/NX, CFG, CET/Shadow Stack, SEHOP, Heap Guard, ACG, Arbitrary Code…

miosa-osa/osa · priv/skills/offensive-windows-privesc/SKILL.md · Comprehensive Windows privilege escalation methodology for offensive security engagements. Covers the full attack…

miosa-osa/osa · priv/skills/offensive-wpa-enterprise/SKILL.md · WPA/WPA2/WPA3-Enterprise (802.1X / EAP) attack methodology — EAP method identification (PEAP-MSCHAPv2, EAP-TTLS…

miosa-osa/osa · priv/skills/offensive-wpa2-psk/SKILL.md · WPA/WPA2-PSK attack methodology — four-way handshake capture via targeted deauthentication, PMKID attacks (no client…

miosa-osa/osa · priv/skills/offensive-wpa3-sae/SKILL.md · WPA3 / SAE (Simultaneous Authentication of Equals) attack methodology — transition-mode (mixed WPA2/WPA3) downgrade…

miosa-osa/osa · priv/skills/offensive-wps/SKILL.md · WPS (Wi-Fi Protected Setup) PIN attack methodology — Pixie Dust offline attack against vulnerable chipsets (Ralink…

miosa-osa/osa · priv/skills/offensive-xss/SKILL.md · Cross-Site Scripting testing checklist: stored/reflected/DOM/blind XSS discovery, polyglot payloads, CSP bypass, XSS…

miosa-osa/osa · priv/skills/offensive-xxe/SKILL.md · XML External Entity injection testing checklist: classic XXE, blind XXE (out-of-band), XXE via file upload (SVG/docx)…

miosa-osa/osa · priv/skills/offensive-z-wave/SKILL.md · Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation…

miosa-osa/osa · priv/skills/offensive-zigbee-thread-matter/SKILL.md · Zigbee, Thread, and Matter mesh-protocol attack methodology — IEEE 802.15.4 sniffing with TI CC2531 / CC2540 / Sonoff…

miosa-osa/osa · priv/skills/opsec-operational-discipline/SKILL.md · Operational security for offensive engagements: OPSEC level tiers (silent/covert/loud) with detection-event budgets…

miosa-osa/osa · priv/skills/osint-methodology/SKILL.md · Structured OSINT methodology framework: target definition, source selection, collection workflows, data correlation…

miosa-osa/osa · priv/skills/penetration-testing/SKILL.md · Full-scope penetration testing — reconnaissance, vulnerability discovery, exploitation, post-exploitation, and…

miosa-osa/osa · priv/skills/redteam-multi-agent-orchestration/SKILL.md · Multi-agent red-team campaign orchestration: mission intake with authorization gates, planner/executor separation…

miosa-osa/osa · priv/skills/redteam-report-generation/SKILL.md · Engagement report generation for red-team and pentest work: severity-ordered finding sections with verification status…

miosa-osa/osa · priv/skills/research-assistant/SKILL.md · Conduct deep, multi-source research on technologies, companies, markets, and topics — synthesizing findings into…

miosa-osa/osa · priv/skills/sales-pipeline/SKILL.md · Monitor sales pipeline, track deals, send follow-up reminders, and forecast revenue

miosa-osa/osa · priv/skills/sandbox-triage/SKILL.md · Triage suspicious files with static metadata and bounded scanning, and distinguish malware detonation from safe…

miosa-osa/osa · priv/skills/security-audit/SKILL.md · Review code, configuration, permissions, authentication, data handling, and dependencies for exploitable security…

miosa-osa/osa · priv/skills/siem-operations/SKILL.md · Validate SIEM ingestion, parsing, alert routing and retention with synthetic canaries and timestamp evidence. Use for…

miosa-osa/osa · priv/skills/skill-authoring/SKILL.md · Create or improve reusable OSA skills with progressive disclosure, precise selection descriptions, supporting…

miosa-osa/osa · priv/skills/test-driven-development/SKILL.md · Build features and bug fixes test first using a strict red, green, refactor loop. Use for TDD requests, regression…

miosa-osa/osa · priv/skills/threat-hunting/SKILL.md · Investigate a testable cyber defense hypothesis across host, identity and network evidence. Use for threat hunting…

miosa-osa/osa · priv/skills/threat-modeling/SKILL.md · Build a concrete cyber defense threat model from assets, data flows and trust boundaries, then map controls to attack…

miosa-osa/osa · priv/skills/vulnerability-management/SKILL.md · Prioritize vulnerabilities using exact affected versions, reachable exposure and known exploitation, then patch and…