Skill UI

This comprehensive checklist guides the secure and compliant deployment of OpenEvidence, a clinical decision support system. It covers critical requirements for handling Protected Health Information (PHI), including HIPAA-grade security, robust API integration best practices, mandatory monitoring setup, and resilience testing. Use this guide to ensure your healthcare-adjacent system meets the highest standards of compliance and reliability.

Execute controlled chaos experiments to proactively test system resilience, fault tolerance, and recovery capabilities. This toolkit simulates real-world failures, such as network latency, service crashes, resource exhaustion, and dependency outages, ensuring that microservices degrade gracefully and recover automatically. It is essential for modern distributed systems validation.

A comprehensive security assessment guide and script to test API rate limit vulnerabilities. It evaluates if an API's security controls can be bypassed using advanced techniques such as IP spoofing (manipulating X-Forwarded-For headers), HTTP method variations, and endpoint path traversal. Designed for penetration testing, it helps assess resilience against brute-force or resource exhaustion attacks, aligning with OWASP API Top 10 findings.

A comprehensive security tool designed to assess the resilience of OAuth 2.0 and OpenID Connect (OIDC) implementations. It probes for critical misconfigurations and security flaws, including authorization code interception, redirect URI manipulation (open redirects), CSRF vulnerabilities, scope escalation, token leakage, and PKCE bypass. Essential for penetration testing of Single Sign-On (SSO) systems and API security.

This skill covers implementing service mesh patterns for AI inference traffic management using Istio or Linkerd. It includes configuring mTLS for security, setting up authorization policies for service accounts, managing egress for model endpoints, and implementing traffic splitting for canary releases and A/B testing. It ensures cross-cluster resilience and protects GPU-backed services from cascading failures without modifying application code.