Skill UI

Provides step-by-step procedures to detect and remediate misconfigured Amazon S3 buckets, including enabling public access blocks, auditing policies and ACLs, enforcing encryption, and automating fixes with AWS Config and Lambda for compliance or incident response scenarios.

Use Trivy to scan Docker and OCI images for OS/library CVEs, secrets, misconfigurations, licenses, and SBOM data; integrates with CI/CD pipelines and exports SARIF/JSON/CycloneDX for policy enforcement.

Use Kubesec to analyze Kubernetes YAML/JSON manifests for misconfigurations, privilege escalation risks, and missing controls, delivering scores and remediation hints via CLI, Docker, kubectl plugin, or REST API for DevSecOps and CI/CD pipelines.

Validates Helm chart provenance, scans rendered templates for misconfigurations, enforces pod security contexts, and hardens RBAC/secrets workflows so Kubernetes deployments stay compliant.

Guides penetration testers through identifying CORS misconfigurations on web APIs, validating origin handling, preflight responses, and crafting PoCs to prove sensitive data can be accessed cross-origin during authorized assessments.