Skill UI

Hardens managed EKS, AKS, and GKE clusters by enforcing Pod Security Standards, network policies, RBAC scoping, image admission controls, workload identity, and runtime monitoring for cloud-specific IAM integrations.

Test JWT implementations for algorithm confusion, none bypass, kid/jku injections, and weak secrets to validate authentication and privilege controls during security assessments.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

Implements remote browser isolation with URL risk scoring, isolation policies, content disarming/reconstruction, DLP controls, and Secure Web Gateway plus ZTNA integration to harden web browsing against exploits and credential theft.

Performs comprehensive iOS app security audits with Frida and Objection for dynamic instrumentation, SSL pinning bypass, keychain dumps, and IPA static analysis to validate OWASP MASTG controls during authorized pentests.

Automates creation, querying, editing, and bulk operations for Feishu Bitable apps, including field, view, and record management with guidance on required formats, batch limits, and concurrency controls.

Controls BrowserWing-based browsers via HTTP endpoints to navigate pages, interact with elements (click/type/select), capture accessibility snapshots, run JavaScript, take screenshots, and execute batch sequences for data extraction workflows.

This comprehensive guide details the implementation of Firebase In-App Messaging within Flutter applications. It covers setup, programmatic message triggering and suppression during critical flows (like payments), and essential privacy controls for GDPR compliance. Learn best practices for testing campaigns, utilizing A/B testing, and managing the full lifecycle of in-app message campaigns.

This tool provides command-line capabilities for subscribing to and consuming real-time events from the Lark/Feishu platform. It streams various events (e.g., IM messages, reactions, member changes) as NDJSON, making it ideal for developing Lark bots, implementing real-time message processing pipelines, or powering long-running AI agents. Users can list available event keys, inspect schemas, and consume data with advanced filtering, timeout, and max-event controls.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

This skill helps developers accurately find and explore the correct Windows API for specific platform capabilities, such as file access, camera usage, notifications, or UI controls. It searches a comprehensive local cache of WinMD metadata, providing full technical details including methods, properties, events, and enumeration values for APIs sourced from the Windows Platform SDK and WinAppSDK. It is indispensable when building complex features requiring deep integration with the Windows operating system.

A comprehensive guide to implementing secure and compliant data handling within Algolia. This skill demonstrates how to transform source records, strip Personally Identifiable Information (PII), implement attribute filtering, and enforce data access controls. It provides robust workflows for GDPR and CCPA compliance, including data deletion (Right to Erasure) and Data Subject Access Requests (DSAR).