LightState Registry / Categories / security-ops

Category Hub · /c/security-ops ✓ 25 Verified Blueprints

Security & Infra

Zero-trust access policies, prompt-injection firewalls, secret scanning, CVE patching, and P0/P1 incident triage.

{ } JSON Feed ↗ + Submit to Security & Infra

Agent Skill

⚡ 88

Cloudflare Turnstile Bot Verification & Siteverify Skill

Implement privacy-preserving Cloudflare Turnstile challenge widgets on frontend forms with mandatory server-side Siteverify token validation and replay pro

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 86

Cloudflare One Zero Trust & Access Policy Architecture Skill

Design and audit Cloudflare Zero Trust Access applications, WARP device posture checks, identity provider OIDC claims, and Cloudflare Tunnel (`cloudflared`

Security & Infra @cloudflare ✓

Blueprint →

Agent Skill

⚡ 85

Enterprise VPN to Cloudflare One Zero Trust Migration Playbook

Step-by-step migration blueprint from legacy VPN/SWG appliances to Cloudflare One: policy mapping, split-tunnel CIDR validation, and staged user cutover.

Security & Infra @cloudflare ✓

Blueprint →

Grok Template

⚡ 88

Perimeter & Repository Security Auditor (DNS, TLS, Secrets & CVEs)

Audits GitHub repositories, SPF/DKIM/DMARC mail records, TLS certificates, and dependency lockfiles to produce a prioritized remediation checklist.

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 87

Inbox Injection Guard — Prompt-Injection & Phishing Firewall

Screens inbound emails, attachments, and webhook payloads for hidden prompt injections, spoofed headers, and credential-harvesting links before other bots

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

Agent Skill

⚡ 87

Supabase Postgres Row-Level Security (RLS) Audit Playbook

Audit every table in a Supabase `public` schema for missing RLS policies, insecure `USING (true)` clauses, unindexed foreign keys, and leaked `service_role

Security & Infra @supabase ✓

Blueprint →

Agent Skill

⚡ 93

LLM Indirect Prompt Injection & Untrusted Data Fencing Skill

Defend autonomous agents against indirect prompt injection in emails, web pages, and MCP tool outputs using XML data fencing, privilege separation, and hum

Security & Infra @simonw ✓

Blueprint →

MCP Server ✓ Claimed

⚡ 93

PagerDuty On-Call Schedules, Incident Escalation & Runbook MCP

Check current on-call engineer rotations, inspect active PagerDuty incidents and alerts, attach diagnostic notes, and acknowledge pages safely.

Security & Infra @getsentry ✓

Blueprint →

MCP Server ✓ Claimed

⚡ 79

Datadog APM Traces, Log Explorer & Active Monitor Alerts MCP

Query Datadog APM latency percentiles, search structured production logs, inspect triggered P1/P2 monitor alerts, and correlate incident timelines.

Security & Infra @getsentry ✓

Blueprint →

Agent Skill

⚡ 88

Docker Multi-Stage Distroless Builds & Image Hardening Skill

Shrink container images by 80% and eliminate OS-level CVEs using multi-stage BuildKit Dockerfiles, non-root distroless runtime images, and Trivy vulnerabil

Security & Infra @steipete ✓

Blueprint →

Use Case

⚡ 90

Nightly Staging vs Production Postgres Schema & RLS Drift Auditor

Compares table definitions, indexes, and Row-Level Security policies between staging and production every night—alerting on unmigrated drift or exposed tab

Security & Infra @supabase ✓

Blueprint →

Agent Skill

⚡ 85

OWASP Top-10 API Security, AuthZ & Secret Hygiene Audit Skill

Systematic security audit for REST and GraphQL APIs: detect Broken Object Level Authorization (BOLA/IDOR), mass assignment, SSRF, JWT algorithm confusion,

Security & Infra @simonw ✓

Blueprint →

Agent Skill

⚡ 84

Automated Dependency CVE Triage & Semver Lockfile Upgrade Skill

Audit `package-lock.json`, `pnpm-lock.yaml`, and `Cargo.lock` for reachable CVEs, test minimal semver patches against the full test suite, and open verifie

Security & Infra @kentcdodds ✓

Blueprint →

Use Case

⚡ 88

Continuous SOC 2 & ISO 27001 Infrastructure Evidence Collector

Collects weekly compliance evidence across GitHub branch-protection rules, Cloudflare WAF policies, WorkOS SSO logs, and dependency CVE scans.

Security & Infra @cloudflare ✓

Blueprint →

MCP Server

⚡ 82

WorkOS Enterprise SSO, Directory Sync (SCIM) & AuthKit MCP

Manage enterprise SAML/OIDC Single Sign-On connections, SCIM directory provisioning, RBAC roles, and Audit Logs via the WorkOS MCP server.

Security & Infra @shadcn ✓

Blueprint →

Grok Template

⚡ 92

Urgenta — P0/P1 Incident Commander & Status Page Coordinator

Correlates Sentry spikes, PagerDuty alerts, and recent GitHub deployments during live incidents—drafting stakeholder status updates and rollback commands.

Security & Infra @getsentry ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 79

Vendor Invoice Fraud, Wire-Change & BEC Verification Guard

Verifies vendor ACH/wire change requests, inspects invoice PDF metadata against historical vendor records, and blocks Business Email Compromise (BEC) attem

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

MCP Server

⚡ 81

Clerk User Authentication, B2B Organizations & Session Audit MCP

Inspect Clerk user profiles, B2B organization memberships, active session tokens, and webhook events directly from your engineering or support agent.

Security & Infra @shadcn ✓

Blueprint →

MCP Server

⚡ 79

LeakPatrol MCP — Real-Time Secret Scanning & Prompt-Exfiltration Firewall

Scan agent tool outputs, outbound HTTP requests, and git commits in real time to block API key leakage, PII exfiltration, and indirect prompt injection.

Security & Infra @simonw ✓

Blueprint →

Use Case

⚡ 82

Kubernetes Pod CrashLoopBackOff & OOMKilled Root-Cause Triage

Detects restarting Kubernetes pods, pulls previous container logs (`--previous`), correlates memory limit spikes in Datadog, and proposes the manifest patc

Security & Infra @steipete ✓

Blueprint →

Grok Template

⚡ 87

Hermes Adversary — Red-Team Prompt & API Abuse Simulator

Probes your customer-facing AI features and API endpoints with adversarial jailbreaks, SSRF payloads, and boundary-condition inputs before launch.

Security & Infra @simonw ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 86

VeilBreaker — Continuous SSL, DNS Hijack & Uptime Watchdog

Monitors production domains for unauthorized DNS record mutations, expiring TLS certificates, unexpected HTTP redirects, and origin latency regressions.

Security & Infra @cloudflare ✓

Launch in Grok Bot ↗ Blueprint →

Grok Template

⚡ 85