Skill UI

This skill provides a comprehensive workflow for analyzing malicious software to extract actionable Indicators of Compromise (IOCs). It covers static analysis (PE parsing, hashing, string extraction) and dynamic analysis techniques. Users learn how to identify file hashes, network indicators (C2 IPs, domains), registry modifications, and behavioral artifacts, ultimately formatting the findings into standard STIX 2.1 formats for sharing and incident response.

This skill utilizes PyMISP, the official library, to programmatically manage the lifecycle of threat intelligence within a MISP instance. Users can create structured events containing Indicators of Compromise (IOCs) such as IPs, domains, and hashes, enrich these events with MITRE ATT&CK tags, manage sharing groups, and export the collected data in standardized STIX 2.1 format. Ideal for security assessments, incident response, and integrating external IOC feeds.

Trivy is an open-source scanner for comprehensive security auditing of container images. It detects vulnerabilities in OS packages, language dependencies, misconfigurations, exposed secrets, and license violations. It is essential for integrating security checks into CI/CD pipelines, performing rigorous security assessments, or conducting incident response investigations. Supports generating SBOMs and reporting in formats like SARIF and CycloneDX.

polars-bio accelerates genomic interval math and bioinformatics I/O by combining Polars, Arrow, and DataFusion to handle BED/VCF/BAM/GFF/FASTA streams, SQL queries, and cloud storage with overlap, coverage, and nearest APIs plus streaming fallbacks.

This powerful tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates identified components against the NVD CVE database via API, building dependency graphs and calculating risk scores. It is essential for assessing third-party risk, identifying transitive vulnerability paths, and generating comprehensive compliance reports for supply chain security.

An automated verification system designed for critical healthcare application deployments (EMR/EHR). This harness enforces stringent patient safety standards by running multiple mandatory test gates, including Clinical Decision Support System (CDSS) accuracy, Protected Health Information (PHI) leakage prevention, and data integrity checks. A single failure in critical gates automatically blocks deployment, ensuring regulatory compliance and optimal patient safety in the CI/CD pipeline.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

A comprehensive guide for implementing Data Loss Prevention (DLP) policies across the Microsoft 365 ecosystem using Microsoft Purview. It details how to protect PII, PHI, and PCI data across Exchange Online, SharePoint, OneDrive, and endpoints. Key features include configuring custom sensitivity labels, regex-based sensitive information types, and endpoint DLP rules via PowerShell, ensuring robust compliance and data governance.

`jq` is the standard and powerful CLI tool for querying, filtering, and reshaping JSON data. This skill provides expert-level practical patterns for working with deeply nested structures, handling complex transformations (like flattening, renaming, and grouping), and integrating JSON logic into shell pipelines. Essential for parsing API outputs (AWS, GitHub), log files, and building robust Bash scripts.

Automates the complex pre-development workflow for large-scale system transformations, such as major rewrites, migrations, or overhauls. This skill performs comprehensive project analysis, task decomposition, planning document generation, and sets up detailed progress tracking across multiple phases, ensuring a structured approach before any coding begins. It supports adaptive control and integrates robust task tracking via GitHub or local files.

Manim is a powerful Python library used for creating high-quality mathematical and scientific animations. This skill facilitates the generation of educational videos and complex visualizations for presentations. It is ideal for researchers, educators, or content creators who need to visualize complex concepts in an engaging animated format. Note: This specific file is related to localization/translation.

Automates creation, querying, editing, and bulk operations for Feishu Bitable apps, including field, view, and record management with guidance on required formats, batch limits, and concurrency controls.