Skill UI

Provides guidance on installing Calico CNI and writing Kubernetes NetworkPolicy and Calico GlobalNetworkPolicy definitions to enforce default-deny, pod-to-pod, namespace, service-account, and host endpoint controls, enabling zero-trust communication and compliance-ready segmentation in clusters.

Defines a structured patch management workflow for discovering, testing, approving, deploying, and verifying software updates across WSUS, SCCM, Ansible, and other tools to reduce vulnerabilities while minimizing disruptions.

Define YAML-based Semgrep custom SAST rules to catch application-specific vulnerabilities, enforce coding standards, and plug into CI/CD pipelines for consistent security testing across supported languages.

Defines SLA-driven workflows for patching or mitigating vulnerabilities by combining severity, asset tiering, exception handling, and escalation to keep remediation teams accountable and measurable.

Analyzes WSDL definitions and exercises SOAP endpoints to detect XML injection, XXE, WS-Security bypass, SOAPAction spoofing, and authentication issues during enterprise security assessments or auditing activities.

Defines an IEC 62443-compliant conduit and workflow for OT remote access, combining DMZ jump servers, MFA gateways, session recording, and approval flows so vendors and engineers manage ICS without touching OT networks directly.

Defines a remote browser isolation deployment that integrates URL categorization, risk-based routing, CDR, DLP controls, and SWG/ZTNA orchestration to harden web access against zero-day exploits, phishing, and data exfiltration.