Skill UI

This skill provides expert guidance on writing and executing C# scripts to manipulate Power BI semantic model metadata using Tabular Editor. It enables advanced automation for bulk operations, managing calculation groups, setting security roles (RLS/OLS), and automating complex model changes via the TOM API. Supports both TE2 and TE3 environments.

A detailed, comprehensive reference guide covering best practices for securing modern applications. This checklist spans network architecture, API design, data encryption, authentication protocols, and regulatory compliance (GDPR, HIPAA, PCI-DSS), ensuring robust security across the entire technology stack.

This skill provides comprehensive security auditing for Model Context Protocol (MCP) servers and their associated tool metadata. It is designed to detect sophisticated supply chain attacks, including tool poisoning (indirect prompt injection), Server-Side Request Forgery (SSRF), tool shadowing, and unauthenticated exposure. It is essential for securing AI agent stacks before integrating new tools or during CI/CD processes.

Automate security regression testing for Large Language Model (LLM) applications by integrating Promptfoo and DeepTeam into CI/CD pipelines. This skill enforces a critical security gate, automatically testing endpoints against OWASP LLM Top 10, OWASP Agentic threats, and common jailbreaks/prompt injections. It ensures that security patches do not regress over time due to prompt or model changes, providing continuous risk monitoring.

This skill detects malicious, misspelled, or brand-jacked package names (typosquatting) across major ecosystems (npm, PyPI, crates.io). It uses advanced techniques like edit-distance and keyboard-proximity analysis, powered by tools like typomania and OSSGadget, to flag potential supply chain attacks *before* a dependency is installed. It is essential for implementing robust CI/CD security gates and proactive dependency screening.

This skill enables comprehensive security graph mapping by ingesting both on-premises Active Directory data (via SharpHound) and cloud Entra ID data (via AzureHound) into BloodHound CE. It analyzes complex, hybrid attack paths, allowing security teams to identify critical privilege escalation chains from low-privileged accounts to Tier-0 assets, mapping findings to MITRE ATT&CK.

This guide provides a comprehensive reference and usage guide for the Redis Command Line Interface (redis-cli). It covers connecting, executing commands in different modes, and offers detailed cheat sheets for all core Redis data structures (Strings, Hashes, Lists, Sets, Sorted Sets). Crucially, it also includes important security considerations and best practices, ensuring users can manage and troubleshoot Redis databases safely from the command line.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

A comprehensive guide covering essential security best practices for Django applications. It details how to implement robust authentication, granular authorization (RBAC), and crucial security settings like CSRF/XSS protection, HSTS, and secure environment configuration to prevent common vulnerabilities in production deployments.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

This comprehensive guide covers security best practices for building robust Quarkus applications. It details how to implement secure authentication (JWT, OIDC), role-based authorization (RBAC), robust input validation (Bean Validation), and advanced protection against vulnerabilities like SQL injection and CSRF. Essential for securing resource access and managing application secrets.