Skip to content

Commit 8526abd

Browse files
badcharsbadchars
committed
chore(skills): update 222 generated NIST skills hackbrowser-mcp → hackbrowser
Batch update all generated SP800-53 SKILL.md files to reference the embedded hackbrowser tool instead of the removed hackbrowser-mcp server.
1 parent b153849 commit 8526abd

221 files changed

Lines changed: 221 additions & 221 deletions

File tree

  • .cyberstrike/skill/NIST/SP800-53_rev5
    • AC_access-control
      • AC-10_concurrent-session-control
      • AC-11(1)_pattern-hiding-displays
      • AC-11_device-lock
      • AC-12(1)_user-initiated-logouts
      • AC-12(2)_termination-message
      • AC-12(3)_timeout-warning-message
      • AC-12_session-termination
      • AC-13_supervision-and-review-access-control
      • AC-14(1)_necessary-uses
      • AC-14_permitted-actions-without-identification-or-authentication
      • AC-15_automated-marking
      • AC-16(1)_dynamic-attribute-association
      • AC-16(10)_attribute-configuration-by-authorized-individuals
      • AC-16(2)_attribute-value-changes-by-authorized-individuals
      • AC-16(3)_maintenance-of-attribute-associations-by-system
      • AC-16(4)_association-of-attributes-by-authorized-individuals
      • AC-16(5)_attribute-displays-on-objects-to-be-output
      • AC-16(6)_maintenance-of-attribute-association
      • AC-16(7)_consistent-attribute-interpretation
      • AC-16(8)_association-techniques-and-technologies
      • AC-16(9)_attribute-reassignment-regrading-mechanisms
      • AC-16_security-and-privacy-attributes
      • AC-17(1)_monitoring-and-control
      • AC-17(10)_authenticate-remote-commands
      • AC-17(2)_protection-of-confidentiality-and-integrity-using-encryption
      • AC-17(3)_managed-access-control-points
      • AC-17(4)_privileged-commands-and-access
      • AC-17(5)_monitoring-for-unauthorized-connections
      • AC-17(6)_protection-of-mechanism-information
      • AC-17(7)_additional-protection-for-security-function-access
      • AC-17(8)_disable-nonsecure-network-protocols
      • AC-17(9)_disconnect-or-disable-access
      • AC-17_remote-access
      • AC-18(1)_authentication-and-encryption
      • AC-18(2)_monitoring-unauthorized-connections
      • AC-18(3)_disable-wireless-networking
      • AC-18(4)_restrict-configurations-by-users
      • AC-18(5)_antennas-and-transmission-power-levels
      • AC-18_wireless-access
      • AC-19(1)_use-of-writable-and-portable-storage-devices
      • AC-19(2)_use-of-personally-owned-portable-storage-devices
      • AC-19(3)_use-of-portable-storage-devices-with-no-identifiable-owner
      • AC-19(4)_restrictions-for-classified-information
      • AC-19(5)_full-device-or-container-based-encryption
      • AC-19_access-control-for-mobile-devices
      • AC-1_policy-and-procedures
      • AC-2(1)_automated-system-account-management
      • AC-2(10)_shared-and-group-account-credential-change
      • AC-2(11)_usage-conditions
      • AC-2(12)_account-monitoring-for-atypical-usage
      • AC-2(13)_disable-accounts-for-high-risk-individuals
      • AC-2(2)_automated-temporary-and-emergency-account-management
      • AC-2(3)_disable-accounts
      • AC-2(4)_automated-audit-actions
      • AC-2(5)_inactivity-logout
      • AC-2(6)_dynamic-privilege-management
      • AC-2(7)_privileged-user-accounts
      • AC-2(8)_dynamic-account-management
      • AC-2(9)_restrictions-on-use-of-shared-and-group-accounts
      • AC-20(1)_limits-on-authorized-use
      • AC-20(2)_portable-storage-devices-restricted-use
      • AC-20(3)_non-organizationally-owned-systems-restricted-use
      • AC-20(4)_network-accessible-storage-devices-prohibited-use
      • AC-20(5)_portable-storage-devices-prohibited-use
      • AC-20_use-of-external-systems
      • AC-21(1)_automated-decision-support
      • AC-21(2)_information-search-and-retrieval
      • AC-21_information-sharing
      • AC-22_publicly-accessible-content
      • AC-23_data-mining-protection
      • AC-24(1)_transmit-access-authorization-information
      • AC-24(2)_no-user-or-process-identity
      • AC-24_access-control-decisions
      • AC-25_reference-monitor
      • AC-2_account-management
      • AC-3(1)_restricted-access-to-privileged-functions
      • AC-3(10)_audited-override-of-access-control-mechanisms
      • AC-3(11)_restrict-access-to-specific-information-types
      • AC-3(12)_assert-and-enforce-application-access
      • AC-3(13)_attribute-based-access-control
      • AC-3(14)_individual-access
      • AC-3(15)_discretionary-and-mandatory-access-control
      • AC-3(2)_dual-authorization
      • AC-3(3)_mandatory-access-control
      • AC-3(4)_discretionary-access-control
      • AC-3(5)_security-relevant-information
      • AC-3(6)_protection-of-user-and-system-information
      • AC-3(7)_role-based-access-control
      • AC-3(8)_revocation-of-access-authorizations
      • AC-3(9)_controlled-release
      • AC-3_access-enforcement
      • AC-4(1)_object-security-and-privacy-attributes
      • AC-4(10)_enable-and-disable-security-or-privacy-policy-filters
      • AC-4(11)_configuration-of-security-or-privacy-policy-filters
      • AC-4(12)_data-type-identifiers
      • AC-4(13)_decomposition-into-policy-relevant-subcomponents
      • AC-4(14)_security-or-privacy-policy-filter-constraints
      • AC-4(15)_detection-of-unsanctioned-information
      • AC-4(16)_information-transfers-on-interconnected-systems
      • AC-4(17)_domain-authentication
      • AC-4(18)_security-attribute-binding
      • AC-4(19)_validation-of-metadata
      • AC-4(2)_processing-domains
      • AC-4(20)_approved-solutions
      • AC-4(21)_physical-or-logical-separation-of-information-flows
      • AC-4(22)_access-only
      • AC-4(23)_modify-non-releasable-information
      • AC-4(24)_internal-normalized-format
      • AC-4(25)_data-sanitization
      • AC-4(26)_audit-filtering-actions
      • AC-4(27)_redundantindependent-filtering-mechanisms
      • AC-4(28)_linear-filter-pipelines
      • AC-4(29)_filter-orchestration-engines
      • AC-4(3)_dynamic-information-flow-control
      • AC-4(30)_filter-mechanisms-using-multiple-processes
      • AC-4(31)_failed-content-transfer-prevention
      • AC-4(32)_process-requirements-for-information-transfer
      • AC-4(4)_flow-control-of-encrypted-information
      • AC-4(5)_embedded-data-types
      • AC-4(6)_metadata
      • AC-4(7)_one-way-flow-mechanisms
      • AC-4(8)_security-and-privacy-policy-filters
      • AC-4(9)_human-reviews
      • AC-4_information-flow-enforcement
      • AC-5_separation-of-duties
      • AC-6(1)_authorize-access-to-security-functions
      • AC-6(10)_prohibit-non-privileged-users-from-executing-privileged-func
      • AC-6(2)_non-privileged-access-for-nonsecurity-functions
      • AC-6(3)_network-access-to-privileged-commands
      • AC-6(4)_separate-processing-domains
      • AC-6(5)_privileged-accounts
      • AC-6(6)_privileged-access-by-non-organizational-users
      • AC-6(7)_review-of-user-privileges
      • AC-6(8)_privilege-levels-for-code-execution
      • AC-6(9)_log-use-of-privileged-functions
      • AC-6_least-privilege
      • AC-7(1)_automatic-account-lock
      • AC-7(2)_purge-or-wipe-mobile-device
      • AC-7(3)_biometric-attempt-limiting
      • AC-7(4)_use-of-alternate-authentication-factor
      • AC-7_unsuccessful-logon-attempts
      • AC-8_system-use-notification
      • AC-9(1)_unsuccessful-logons
      • AC-9(2)_successful-and-unsuccessful-logons
      • AC-9(3)_notification-of-account-changes
      • AC-9(4)_additional-logon-information
      • AC-9_previous-logon-notification
    • IA_identification-and-authentication
      • IA-10_adaptive-authentication
      • IA-11_re-authentication
      • IA-12(1)_supervisor-authorization
      • IA-12(2)_identity-evidence
      • IA-12(3)_identity-evidence-validation-and-verification
      • IA-12(4)_in-person-validation-and-verification
      • IA-12(5)_address-confirmation
      • IA-12(6)_accept-externally-proofed-identities
      • IA-12_identity-proofing
      • IA-13(1)_protection-of-cryptographic-keys
      • IA-13(2)_verification-of-identity-assertions-and-access-tokens
      • IA-13(3)_token-management
      • IA-13_identity-providers-and-authorization-servers
      • IA-1_policy-and-procedures
      • IA-2(1)_multi-factor-authentication-to-privileged-accounts
      • IA-2(10)_single-sign-on
      • IA-2(11)_remote-access-separate-device
      • IA-2(12)_acceptance-of-piv-credentials
      • IA-2(13)_out-of-band-authentication
      • IA-2(2)_multi-factor-authentication-to-non-privileged-accounts
      • IA-2(3)_local-access-to-privileged-accounts
      • IA-2(4)_local-access-to-non-privileged-accounts
      • IA-2(5)_individual-authentication-with-group-authentication
      • IA-2(6)_access-to-accounts-separate-device
      • IA-2(7)_network-access-to-non-privileged-accounts-separate-device
      • IA-2(8)_access-to-accounts-replay-resistant
      • IA-2(9)_network-access-to-non-privileged-accounts-replay-resistant
      • IA-2_identification-and-authentication-organizational-users
      • IA-3(1)_cryptographic-bidirectional-authentication
      • IA-3(2)_cryptographic-bidirectional-network-authentication
      • IA-3(3)_dynamic-address-allocation
      • IA-3(4)_device-attestation
      • IA-3_device-identification-and-authentication
      • IA-4(1)_prohibit-account-identifiers-as-public-identifiers
      • IA-4(2)_supervisor-authorization
      • IA-4(3)_multiple-forms-of-certification
      • IA-4(4)_identify-user-status
      • IA-4(5)_dynamic-management
      • IA-4(6)_cross-organization-management
      • IA-4(7)_in-person-registration
      • IA-4(8)_pairwise-pseudonymous-identifiers
      • IA-4(9)_attribute-maintenance-and-protection
      • IA-4_identifier-management
      • IA-5(1)_password-based-authentication
      • IA-5(10)_dynamic-credential-binding
      • IA-5(11)_hardware-token-based-authentication
      • IA-5(12)_biometric-authentication-performance
      • IA-5(13)_expiration-of-cached-authenticators
      • IA-5(14)_managing-content-of-pki-trust-stores
      • IA-5(15)_gsa-approved-products-and-services
      • IA-5(16)_in-person-or-trusted-external-party-authenticator-issuance
      • IA-5(17)_presentation-attack-detection-for-biometric-authenticators
      • IA-5(18)_password-managers
      • IA-5(2)_public-key-based-authentication
      • IA-5(3)_in-person-or-trusted-external-party-registration
      • IA-5(4)_automated-support-for-password-strength-determination
      • IA-5(5)_change-authenticators-prior-to-delivery
      • IA-5(6)_protection-of-authenticators
      • IA-5(7)_no-embedded-unencrypted-static-authenticators
      • IA-5(8)_multiple-system-accounts
      • IA-5(9)_federated-credential-management
      • IA-5_authenticator-management
      • IA-6_authentication-feedback
      • IA-7_cryptographic-module-authentication
      • IA-8(1)_acceptance-of-piv-credentials-from-other-agencies
      • IA-8(2)_acceptance-of-external-authenticators
      • IA-8(3)_use-of-ficam-approved-products
      • IA-8(4)_use-of-defined-profiles
      • IA-8(5)_acceptance-of-piv-i-credentials
      • IA-8(6)_disassociability
      • IA-8_identification-and-authentication-non-organizational-users
      • IA-9(1)_information-exchange
      • IA-9(2)_transmission-of-decisions
      • IA-9_service-identification-and-authentication

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-10_concurrent-session-control/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6565
| Tool | Purpose | Usage |
6666
| --------------- | -------------------------------------- | -------------------------- |
6767
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
68-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
68+
| hackbrowser | Test web application access controls | `hackbrowser` |
6969

7070
## Remediation Guide
7171

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-11(1)_pattern-hiding-displays/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6868
| Tool | Purpose | Usage |
6969
| --------------- | -------------------------------------- | -------------------------- |
7070
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
71-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
71+
| hackbrowser | Test web application access controls | `hackbrowser` |
7272

7373
## Remediation Guide
7474

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-11_device-lock/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
7171
| Tool | Purpose | Usage |
7272
| --------------- | -------------------------------------- | -------------------------- |
7373
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
74-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
74+
| hackbrowser | Test web application access controls | `hackbrowser` |
7575

7676
## Remediation Guide
7777

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-12(1)_user-initiated-logouts/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6868
| Tool | Purpose | Usage |
6969
| --------------- | -------------------------------------- | -------------------------- |
7070
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
71-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
71+
| hackbrowser | Test web application access controls | `hackbrowser` |
7272

7373
## Remediation Guide
7474

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-12(2)_termination-message/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6868
| Tool | Purpose | Usage |
6969
| --------------- | -------------------------------------- | -------------------------- |
7070
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
71-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
71+
| hackbrowser | Test web application access controls | `hackbrowser` |
7272

7373
## Remediation Guide
7474

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-12(3)_timeout-warning-message/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6868
| Tool | Purpose | Usage |
6969
| --------------- | -------------------------------------- | -------------------------- |
7070
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
71-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
71+
| hackbrowser | Test web application access controls | `hackbrowser` |
7272

7373
## Remediation Guide
7474

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-12_session-termination/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6969
| Tool | Purpose | Usage |
7070
| --------------- | -------------------------------------- | -------------------------- |
7171
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
72-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
72+
| hackbrowser | Test web application access controls | `hackbrowser` |
7373

7474
## Remediation Guide
7575

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-13_supervision-and-review-access-control/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6363
| Tool | Purpose | Usage |
6464
| --------------- | -------------------------------------- | -------------------------- |
6565
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
66-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
66+
| hackbrowser | Test web application access controls | `hackbrowser` |
6767

6868
## Remediation Guide
6969

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-14(1)_necessary-uses/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
6868
| Tool | Purpose | Usage |
6969
| --------------- | -------------------------------------- | -------------------------- |
7070
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
71-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
71+
| hackbrowser | Test web application access controls | `hackbrowser` |
7272

7373
## Remediation Guide
7474

‎.cyberstrike/skill/NIST/SP800-53_rev5/AC_access-control/AC-14_permitted-actions-without-identification-or-authentication/SKILL.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ Verify the control is actively functioning, not just documented. Check logs, con
7070
| Tool | Purpose | Usage |
7171
| --------------- | -------------------------------------- | -------------------------- |
7272
| cloud-audit-mcp | Check IAM policies and access controls | `cloud_audit_iam_policies` |
73-
| hackbrowser-mcp | Test web application access controls | `browser_auth_test` |
73+
| hackbrowser | Test web application access controls | `hackbrowser` |
7474

7575
## Remediation Guide
7676

0 commit comments

Comments
 (0)