Skill UI

Walks through setting up AWS KMS envelope encryption so you can generate DEKs, encrypt/decrypt data locally with AES-256-GCM, cache keys, and rotate master keys while maintaining compliance controls in cloud security deployments.

Guides implementing privileged session recording via CyberArk PSM or open-source alternatives, covering architecture, connection components, keystroke capture, policy tuning, real-time monitoring, and compliance-ready audit trails for elevated access.

Implements automated secrets scanning in CI/CD pipelines by integrating gitleaks and trufflehog so leaking API keys, tokens or passwords are detected and blocked before deployments across GitHub Actions, GitLab CI, or Jenkins.

Enumerates Active Directory forest trust relationships with impacket to audit SID filtering, trust keys, SID history abuse, and Kerberos inter-realm ticket risks for red-team assessments and incident response investigations.

Continuously scrape Pastebin, GitHub Gists and similar paste services to detect leaked credentials or API keys through keyword alerts and regex-based pattern matching, enabling swift incident response before stolen data is weaponized.

A comprehensive guide for integrating Firebase Crashlytics into Flutter applications. It teaches how to capture fatal, non-fatal, and isolate errors, customize reports with user identifiers, custom keys, and logs, and manage opt-in data collection to ensure robust crash monitoring in production environments.

This tool provides command-line capabilities for subscribing to and consuming real-time events from the Lark/Feishu platform. It streams various events (e.g., IM messages, reactions, member changes) as NDJSON, making it ideal for developing Lark bots, implementing real-time message processing pipelines, or powering long-running AI agents. Users can list available event keys, inspect schemas, and consume data with advanced filtering, timeout, and max-event controls.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This skill is designed for understanding complex database structures. It allows users to list all available tables, intelligently filter relevant tables based on natural language queries, retrieve detailed schemas (columns, types, primary/foreign keys), and map inter-table relationships. It culminates in generating the M-Schema format, which is essential for accurately preparing the context needed for advanced SQL query generation.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for Algolia Enterprise environments. It covers defining granular permissions using ACLs, generating Secured API Keys for strict multi-tenant data isolation, and building middleware to validate service permissions, ensuring the principle of least privilege in large-scale applications.

A comprehensive guide for integrating the Algolia JavaScript v5 client into Node.js/TypeScript projects. It covers proper installation, secure management of Application IDs and API keys (Admin vs. Search-Only), and best practices for client initialization, ensuring robust and safe search functionality implementation.

This guide details Algolia's security best practices, focusing on scoped API keys. It covers essential concepts like separating API keys for frontend vs. backend use, applying the principle of least privilege, and generating secured, time-limited, per-user keys. It also provides a complete procedure for key rotation to maintain a robust production security posture.