Skill UI

Uses boto3 plus Cloudsplaining-style policy analysis to detect AWS IAM privilege escalation paths, highlight dangerous permission combinations, and deliver structured remediation guidance for SOC and security teams.

A step-by-step playbook for spotting and abusing JavaScript prototype pollution in both browsers and Node.js services to trigger DOM XSS, remote code execution, and authorization bypasses during security hunts and code reviews.

Guides teams through deploying managed WAF rule sets and tailored defenses on AWS, Azure, and Cloudflare, covering rate limiting, geo-blocking, bot management, and logging analysis to keep cloud apps safe from OWASP Top Ten threats.

Implements runtime protection for EC2/GCE workloads using boto3 and Google Cloud APIs; monitors processes, files, networks, and resource usage to detect cryptomining, reverse shells, and unauthorized binaries during security deployments.

Configure Cloudflare DDoS protection across network, protocol, and application layers via managed rulesets, WAF overrides, rate limiting, Bot Management, and origin hardening to stop volumetric, protocol, and HTTP flood attacks.

Run security chaos engineering experiments that disable WAFs, firewall rules, log pipelines, or EDR via boto3 and subprocess calls to verify SOC detection, alerting, and response coverage during deployments or assessments.

Guide for using AWS CloudTrail logs, Athena, and boto3 to reconstruct attacker activity, track compromised credentials, and produce forensic timelines for cloud incident response.

Guides securing public API Gateway endpoints using AWS WAF managed rule groups for OWASP coverage, custom rate limits, bot control, IP reputation filtering, and metric monitoring to keep attacks and abuse in check.

Provides end-to-end guidance for fine-tuning and serving Physical Intelligence’s OpenPI pi0 family (pi0, pi0-fast, pi0.5) with both JAX and PyTorch backends, covering dataset prep, norm stats, checkpoint conversion, and low-latency WebSocket policy inference for ALOHA, DROID, and LIBERO tasks.

A comprehensive guide to diagnosing and resolving performance bottlenecks in React applications. This skill teaches advanced techniques like state isolation, memoization (using `useMemo`, `useCallback`, and `React.memo`), and list virtualization. It guides users through profiling using React DevTools to identify render hotspots, ensuring components render efficiently and maintain high application responsiveness.

This skill provides a comprehensive, structured workflow for diagnosing performance bottlenecks in SwiftUI applications. It guides users through a code-first review to detect common issues like invalidation storms, layout thrash, or heavy main-thread work. When code review is insufficient, it provides detailed guidance on collecting runtime evidence using Instruments, enabling precise root cause analysis and targeted remediation strategies.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.