Skill UI

This skill guides the integration of gitleaks and trufflehog into CI/CD pipelines. It automates the detection of hardcoded secrets, such as API keys, passwords, and tokens, preventing their accidental deployment. By integrating scans as a mandatory pre-deployment gate, organizations enforce strong security policies and maintain compliance.

This skill guides the process of designing, implementing, and validating advanced security detection use cases for Security Information and Event Management (SIEM) platforms like Splunk, Elastic, and Microsoft Sentinel. It focuses on mapping organizational threat profiles to the MITRE ATT&CK framework to build formal, high-fidelity detection rules, thereby strengthening Security Operations Center (SOC) coverage and reducing blind spots.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

A comprehensive guide and technical framework for detecting and mitigating ransomware kill switch mechanisms. It details methods for analyzing mutex guards, domain-based communication, and registry checks. Learn how to deploy proactive mutex vaccination and use Sysmon/DNS monitoring to prevent malware execution during incident response and analysis.

A guide on handling asynchronous operations and event notifications for the Grammarly API. Since Grammarly does not provide native push webhooks, this skill demonstrates techniques for implementing polling mechanisms (e.g., for plagiarism detection) and building a robust event bus to reliably handle streamed results, such as score completion or AI content detection alerts.

This utility addresses the lack of webhooks for OneNote resources. It implements an efficient change detection mechanism by performing timestamp-based polling and delta query comparisons against the Microsoft Graph API. It is essential for building real-time synchronization, change monitoring, or event-driven integrations for OneNote, while carefully managing API rate limits.

This tool enables the real-time transmission of structured Aegis events (such as clip completion or person detection) to any external webhook URL. By posting event data as JSON, it seamlessly integrates Aegis functionality with major automation platforms like Zapier, IFTTT, Make, or custom backend services, allowing users to build complex, event-driven workflows and extend system capabilities.

This comprehensive guide details how to use industry-leading tools like TruffleHog and git-secrets to scan source code repositories, full git history, and configuration files for hardcoded AWS credentials and secrets. It is essential for integrating secrets detection into CI/CD pipelines, performing proactive security audits, and ensuring compliance by preventing sensitive keys from reaching production environments.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.