Skill UI

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

A comprehensive skill designed to manage, track, and persist image assets generated by Ideogram's API. This tool addresses the critical issue of expiring image URLs by implementing a complete lifecycle pipeline. It handles metadata tracking (prompt, seed, model, style, etc.), immediate downloading, and robust storage to both local filesystems and cloud solutions like S3. Features include asset persistence, generation history logging, and image reproduction using stored seed values.

This guide details essential patterns for building fault-tolerant and highly available Replit applications. It covers handling cold starts, implementing graceful shutdowns (via SIGTERM), and crucially, migrating persistent application state from ephemeral local filesystems to robust external storage (like Replit KV or Object Storage). Essential for production-grade deployments.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

Detects unauthorized runtime drift in containers by monitoring binary execution, filesystem changes, and configuration deviation from the original immutable image. Uses Falco and Microsoft Defender for Containers. Ideal for validating immutable-infrastructure controls, hunting for unexpected package installs or binaries, and determining whether a container diverged from its source image.

This comprehensive guide provides best practices for hardening container images, dramatically minimizing the attack surface in production environments. It covers advanced techniques such as implementing multi-stage builds, using distroless images, running containers as non-root users, and configuring read-only filesystems. Adherence to CIS Docker Benchmark and secure DevSecOps practices are key focuses.

This skill guides users through advanced container security practices using Trivy. It covers vulnerability scanning for container images, filesystems, IaC (Terraform, K8s), and Git repositories. Key features include generating industry-standard SBOMs (CycloneDX/SPDX), integrating scanning into CI/CD pipelines, and deploying the Kubernetes Operator for comprehensive supply chain security and compliance auditing.

Grype is an open-source vulnerability scanner by Anchore that inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated Software Bill of Materials (SBOMs) to match packages against multiple databases including NVD, GitHub Advisories, and OS-specific feeds. It is ideal for security assessments, CI/CD integration, and implementing severity-based build gates.

Kubesec is an open-source security risk analysis tool that scores Kubernetes resource manifests to identify security misconfigurations, privilege escalation risks, and policy violations. It checks for best practices like immutable root filesystems and non-root execution. Ideal for integrating into CI/CD pipelines, pre-deployment manifest review, or performing security audits.

MCPB is a specialized local server bundle that packages the entire runtime environment (Node.js or Python) alongside the server code. It allows developers to distribute and run complex MCP services directly on a user's machine without requiring the user to pre-install specific runtimes or toolchains. Use this when the server must interact with the local filesystem, desktop applications, or OS-level APIs.

A command-line interface (CLI) for accessing and interacting with Model Context Protocol (MCP) servers. It acts as a unified gateway, allowing users to discover, inspect, and execute tools and APIs from external sources like filesystems, databases, APIs, and specialized services. Essential for programmatic workflow automation and system integration.

This skill allows users to manage Box cloud storage as if it were a local filesystem. It supports two modes: transparent auto-syncing via hooks (on Write/Edit) and explicit operations using the Box CLI. It provides structured workflows for document management, collaborative syncing, and reliable version control.