Skill UI

This comprehensive skill guides the process of rapid malware triage and classification using YARA rules. It covers advanced techniques for writing detection rules based on unique strings, specific byte sequences, and structural PE characteristics. It is essential for security analysts building automated detection pipelines, scanning endpoints, or performing large-scale threat hunting across an enterprise environment.

A comprehensive guide detailing how to integrate and use Firebase Cloud Storage within Flutter applications. Covers the entire lifecycle of file operations, including uploading assets, downloading data, managing custom metadata, handling various Firebase errors, monitoring upload progress, and enforcing robust security rules.

Defines Salesforce Lightning Web Component, Aura, and Visualforce quality/security standards covering SLDS 2 styling, accessibility (WCAG 2.1 AA), data access patterns, component communication rules, XSS/CSRF protections, view state management, and Jest testing requirements for guided UI development and reviews.

A comprehensive guide for implementing robust policy enforcement and security guardrails in HubSpot integrations. This methodology covers secret scanning within CI/CD pipelines to prevent token leaks, utilizes ESLint rules for enforcing modern authentication practices, and leverages TypeScript for compile-time and runtime checks. Use this when setting up secure, scalable, and compliant codebases for HubSpot APIs.

This guide implements comprehensive policy guardrails for robust Salesforce integrations. It provides solutions for preventing SOQL injection vulnerabilities, detecting hardcoded credentials, throttling API usage at runtime, and enforcing code quality via custom ESLint rules and CI/CD checks. Use this when building secure, scalable, and compliant Salesforce applications.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

This skill provides comprehensive guidance on implementing robust data governance and security guardrails within Snowflake. It covers advanced features such as network rules, mandatory authentication policies (MFA, Key Pair), session timeouts, and statement-level controls. Use this when enforcing strict security policies, achieving regulatory compliance, or structuring robust data access controls for a Snowflake environment.

HTTP Parameter Pollution (HPP) occurs when a single request contains multiple instances of the same parameter key. Different components in the request path (e.g., WAFs, proxies, application frameworks) may parse these duplicate keys using different rules (first value, last value, array join). This skill teaches how to exploit these discrepancies to bypass security checks, execute SSRF, or manipulate business logic.

This meta-skill implements a combinator pattern for deep security analysis. It runs three independent gates—policy governance, secret scanning, and audit logging—over a candidate operation. It enforces a strict arbitration rule (Policy DENY > Scanner WARN > ALLOW) to provide a robust, multi-layered verdict, making it ideal for reviewing critical code changes or environment modifications for safety compliance.

This skill guides the full lifecycle of threat intelligence processing, transforming raw indicators of compromise (IOCs) from MISP feeds into actionable security detections. It covers feed curation, false positive reduction using warninglists, and automating the generation of high-fidelity rules for Suricata, Sigma, and Wazuh. Use this to mature your MISP instance from a repository into a proactive detection engine.