Skill UI

This playbook details the methodology for detecting and exploiting subdomain takeover vulnerabilities. It focuses on identifying CNAME/NS/MX records pointing to deprovisioned or unclaimed cloud resources (e.g., AWS S3 buckets, Heroku apps). Understanding these weaknesses allows attackers to serve malicious content under the victim's trusted domain, leading to phishing, credential theft, and security bypasses.

This workflow systematically analyzes deployed AWS resources and Infrastructure-as-Code (IaC) definitions. It collects usage metrics from CloudWatch and Cost Explorer to identify over-provisioning, unused resources, and inefficient configurations (e.g., right-sizing EC2, S3 lifecycle policies). It generates actionable cost optimization recommendations and creates structured GitHub issues for tracking and implementing savings.

This skill allows users to query the current state of various AWS resources (including EC2, S3, Lambda, RDS, VPC, etc.) using natural language. It translates user intent into strictly read-only AWS CLI commands (e.g., `describe-*`, `list-*`). Crucially, this tool can only view data and is contractually incapable of performing any write, modify, delete, or mutation actions, ensuring maximum safety.

Neon Object Storage provides S3-compatible, branch-aware object storage directly integrated with your Neon Postgres project. It ensures that files (images, documents, user uploads) remain perfectly synchronized with the database schema across all development branches (dev, preview, staging, production). Use this skill when you need a single backend for both database rows and file assets, eliminating the need for separate cloud storage providers.

A comprehensive guide for bringing RuView CSI sensing nodes (ESP32-S3/C6) online. This skill covers the full lifecycle: building the embedded firmware, flashing the device, provisioning WiFi credentials, and confirming the Continuous Sensing Image (CSI) data stream. Essential for physical hardware deployment and debugging of complex sensing systems.