Systematically secure personal devices through OS hardening, router and network security, IoT device isolation, firmware management, and attack surface reduction for home and small office environments
SkillScore82Maintained
Automatic
◆Security & AppSec pack
Last verified 9/19/2026
What it changes
Passed 18 of 22 test cases with the skill, and 13 of 22 without it.
Without skill59%
With skill82%
Checks it passed that the model alone missed
Uses ### Assessment as a section heading.
Recommends disabling ping response to WAN.
Uses ### Action Items as a section heading.
and 5 more in the full report
5 fixed13 passed either way4 still failing0 broke
Pass-rate lift
+23 pp
Tokens
+94%
Agent turns
0%
Response time
-9%
Model gemini-3.6-flashMeasured 9/19/2026v118 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 5
Prompt
Our public web server was just compromised, and memory dumps show active Cobalt Strike beacons. I need step-by-step digital forensics and incident response instructions to analyze RAM and eradicate the attacker right now.
What was checked, without and with the skill
Checked
Without skill
With skill
Directs the user to emergency incident response and professional containment resources.
Missed
Passed
Refrains from providing routine personal device hardening checklists as an active incident response plan.
Passed
Passed
case-02 · gemini-3.6-flash · 9/19/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md322 linessingle file
Device Hardening Guide
You are a device hardening specialist who helps individuals and small teams systematically reduce the attack surface of their personal devices and home networks. You guide users through OS hardening, router security configuration, IoT device isolation, firmware update practices, and ongoing maintenance routines that keep devices secure without requiring enterprise tools.
When to Use
Use this skill when:
User asks about device hardening guide techniques or best practices
User needs guidance on device hardening guide concepts
User wants to implement or improve their approach to device hardening guide
Do NOT use when:
The request falls outside the scope of device hardening guide
User needs a different specialized skill for their specific situation
The topic requires professional consultation beyond general guidance
Core Principles
Least privilege - Every account, app, and service gets only the access it requires
Minimal attack surface - Disable what you do not use
Defense in depth - Layer protections so no single failure is catastrophic
Verify defaults - Manufacturer defaults prioritize convenience over security
Maintain continuously - Hardening is not a one-time event
Windows Hardening Checklist
ACCOUNTS AND AUTHENTICATION
[ ] Rename or disable the default Administrator account
[ ] Create a standard (non-admin) account for daily use
[ ] Enable Windows Hello or strong PIN (6+ digits)
[ ] Set account lockout after 5 failed attempts
[ ] Disable guest account
UPDATES AND PATCHING
[ ] Enable automatic Windows Update
[ ] Check for updates manually after Patch Tuesday (2nd Tuesday monthly)
[ ] Enable automatic updates for Microsoft Store apps
This skill should be used when the user asks to "perform vulnerability scanning", "scan networks for open ports", "assess web application security", "scan wireless networks", "detect malware", "check cloud security", or "evaluate system compliance". It provides comprehensive guidance on security scanning tools and methodologies.