Skill UI

This comprehensive reference architecture guides the integration of OpenEvidence into clinical decision support systems (CDS). It is designed for healthcare platforms needing evidence-based query processing, deterministic citation tracking, and full audit logging. Key considerations include HIPAA compliance, optimizing for sub-second response times in point-of-care workflows, and establishing robust data models and event pipelines.

This skill provides comprehensive strategies for implementing robust caching mechanisms for OpenRouter API calls. It covers in-memory caching using Python, persistent caching with Redis for scalability, and utilizing provider-specific features like Anthropic prompt caching. By implementing deterministic key generation and managing Time-To-Live (TTL), developers can significantly reduce API costs and improve application latency when handling repetitive or similar LLM queries, making it ideal for RAG systems and high-volume applications.

A comprehensive workflow bundle designed for system administrators and developers. It guides users through the entire lifecycle of system management and shell scripting across Linux, macOS, and Windows. Key phases include environment assessment, writing robust Bash scripts, advanced debugging techniques, linting with ShellCheck, and rigorous test automation using Bats, ensuring scalable and reliable automation.

This comprehensive guide demonstrates how to achieve highly testable Swift code using protocol-based dependency injection. By abstracting external concerns—such as file systems, networking, and external APIs—into small, focused protocols, developers can write deterministic unit tests that mock side effects and error paths, ensuring robust architecture across different environments (App, Test, Preview).

Systematic Windows privilege escalation guide covering enumeration, credential harvesting, service abuse, token impersonation, kernel exploits and configuration flaws to elevate from standard user to Administrator/SYSTEM during pentests.

This skill facilitates the configuration and management of Single Sign-On (SSO) for Windsurf enterprise deployments. It supports industry-standard protocols like SAML 2.0 and OIDC/OAuth 2.0, allowing seamless identity integration with major providers such as Okta, Azure AD, and Google Workspace. Essential for administrators implementing centralized, secure enterprise authentication.

Expert guide for building durable distributed systems with the Temporal Go SDK, covering deterministic workflow rules, mTLS worker configuration, advanced patterns, and testing/observability strategies for production workloads.

A comprehensive, structured playbook for Security Operations Centers (SOCs) detailing the entire lifecycle of ransomware incidents. It guides analysts through detection (SIEM queries), triage decision trees, containment (EDR/Firewall), evidence collection, and recovery phases, adhering to NIST CSF and MITRE ATT&CK frameworks.

This system manages vulnerabilities that cannot be remediated within Service Level Agreement (SLA) timelines. It provides structured workflows for requesting exceptions, documenting compensating controls, obtaining formal risk acceptance approvals, and automatically managing expiration. It helps organizations maintain visibility into accepted risks to comply with major frameworks like PCI DSS, SOC 2, and NIST CSF.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.

This skill provides methods and tools for detecting sophisticated cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS). It focuses on detecting anomalies like unauthorized command injection, Man-in-the-Middle attacks on industrial protocols (Modbus, DNP3), and data manipulation, which traditional IT security tools often miss. Usage involves establishing deterministic communication baselines and monitoring network traffic for deviations.

This skill automates the process of testing for Broken Function Level Authorization (BFLA) vulnerabilities in APIs. It simulates attempts by low-privilege users to access or execute administrative functions and privileged endpoints by manipulating HTTP methods, paths, and credentials. It is essential for comprehensive API security audits and validating Role-Based Access Control (RBAC) enforcement.