Skill UI

This guide details the implementation of Delinea Secret Server for robust Privileged Access Management (PAM). It covers infrastructure deployment (IIS, SQL Server), configuring secret templates, automating the onboarding of credentials, and establishing centralized vaulting for sensitive accounts. It is essential for organizations needing to meet compliance mandates (SOX, PCI-DSS) by eliminating plaintext credentials and automating password rotation.

Guide to implement Ed25519 digital signatures for document, code, and API signing, covering key pair generation, deterministic signing, verification flows, multi-signature checks, and RSA/ECDSA comparisons.

Guides teams through planning, implementing, auditing, and certifying an ISO/IEC 27001:2022 information security management system, covering scope definition, risk assessment, Annex A control selection, Statement of Applicability, and continuous improvement practices.

Guides organizations through implementing zero trust architecture across AWS, Azure, and GCP, following NIST SP 800-207 and BeyondCorp. Covers identity-aware proxies, micro-segmentation, continuous verification, and device trust assessment to replace implicit network trust.

Analyzes Content Security Policy implementations and demonstrates bypass techniques such as unsafe directives, JSONP gadgets, nonce leaks, base-uri and form-action tricks to enable XSS execution and sensitive data exfiltration during security assessments.

Guides teams through a complete NIST Cybersecurity Framework 2.0 maturity assessment, mapping current implementation tiers across Govern, Identify, Protect, Detect, Respond, and Recover functions and producing gap analyses plus improvement roadmaps.

This comprehensive guide covers the principles and implementation steps for building Progressive Web Apps (PWAs). Learn to integrate essential components like Web App Manifests and Service Workers to ensure your web application offers a reliable, fast, and truly offline-capable experience, mimicking the feel of a native mobile app. Ideal for enhancing web resilience and installability.

Test JWT implementations for algorithm confusion, none bypass, kid/jku injections, and weak secrets to validate authentication and privilege controls during security assessments.

Performs targeted security assessments of JSON Web Token implementations, probing algorithm confusion, claim tampering, brute-force secrets, and misuse during penetration tests of APIs, SSO, and microservice authentication flows.

Evaluates OAuth 2.0 and OpenID Connect deployments for redirect URI flaws, CSRF via missing state, PKCE bypasses, token leakage, and scope escalation to ensure secure authorization-code flows before production onboarding.

A comprehensive guide for building or reviewing SwiftUI User Interfaces that utilize the modern Liquid Glass aesthetic. This skill focuses on correctly implementing native Apple APIs (like `glassEffect` and `GlassEffectContainer`) while ensuring proper fallback mechanisms, modifier ordering, and performance for iOS 26+ devices. Ideal for adopting cutting-edge iOS design patterns.

Summarizes the Test-Driven Development workflow with RED/GREEN/REFACTOR phases, the AAA pattern, prioritization cues, anti-patterns, and AI-augmented agent roles to guide implementation.