Skill UI

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

This guide provides a comprehensive walkthrough for deploying and configuring a production-grade Command and Control (C2) infrastructure using the open-source Havoc framework. It covers setting up the Teamserver, configuring secure HTTPS listeners, implementing redirectors (e.g., Nginx), and deploying Demon agents for advanced post-exploitation red team operations. This skill is essential for authorized security assessments and building robust defensive countermeasures.

A robust framework for orchestrating complex, multi-step coding tasks using multiple AI agents. It functions by first planning the entire project into a mission dependency graph (DAG), then dispatching specialized agents to isolated Git worktrees for parallel development. The system automatically monitors progress, handles merges, and generates structured, comprehensive reports detailing changes, completed tasks, and next steps.

This guide details the comprehensive deployment of Palo Alto Networks Prisma Access for implementing a modern SASE-based Zero Trust Network Access (ZTNA). It covers configuring the cloud infrastructure, deploying ZTNA Connectors, defining granular application policies, enforcing device posture via Host Information Profile (HIP), and utilizing GlobalProtect agents for secure, enterprise-grade remote access.

This script is designed for malware analysis, specifically targeting .NET-based Remote Access Trojans (RATs) like Agent Tesla. It automatically extracts embedded and obfuscated configuration data, including SMTP credentials, FTP endpoints, Telegram tokens, and C2 webhooks. It utilizes advanced techniques such as regex pattern matching, Base64 decoding, and simulating XOR/SHA256 decryption to reveal critical threat intelligence for security research.

Scans web server roots for high-entropy files, suspicious PHP/JSP/ASP payloads, and recent modifications to flag obfuscated webshells via entropy thresholds, regex signatures, and file metadata.

This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for robust policy-as-code enforcement. Learn to write complex Rego policies, deploy OPA Gatekeeper as a Kubernetes admission controller, and integrate policy evaluation into CI/CD pipelines to enforce security and compliance across clusters.

Learn how to implement Runtime Application Self-Protection (RASP) agents for Java and Python web applications. This skill covers deploying OpenRASP, detecting OWASP Top 10 attacks (SQLi, XSS, RCE), configuring security policies, and integrating real-time security alerts with SIEM platforms for comprehensive defense in depth.

This skill covers performing comprehensive vulnerability assessments across diverse environments, including on-premises infrastructure, cloud VMs, and container registries. It leverages standard network protocols like SSH (Linux) and WMI (Windows), coupled with advanced cloud provider APIs for analyzing disk snapshots without requiring local endpoint agents. Ideal for security auditing and compliance checks.

AgentHub spawns parallel git worktree agents that compete on tasks, evaluates their outputs via metrics or LLM judges, and merges the top branch for optimizations, research, or content variations.

CCPM orchestrates software delivery from PRD through epics and GitHub issues into parallel agent execution, covering planning, decomposition, syncing, workstart, and status checks with mandated script-based reporting.

Automatically reverse-engineers any codebase (frontend, backend, or fullstack) into a comprehensive Product Requirements Document (PRD). It analyzes complex elements like routes, components, API integrations, state management, and business logic across major stacks (React, Vue, Next.js, Django, FastAPI). The resulting PRD is detailed enough for both product managers (understanding 'what') and engineers/AI agents (understanding 'how' to reconstruct the system).