Skill UI

This system detects ransomware by combining multiple advanced techniques: real-time entropy analysis, file system I/O monitoring, and behavioral heuristics. It identifies abnormal mass file modification patterns, sudden spikes in data entropy (indicating encryption), and suspicious process activities like shadow copy deletion. Ideal for building advanced EDR detection layers to catch zero-day and unknown ransomware variants.

This tool detects malicious packages mimicking legitimate dependencies in npm and PyPI. It analyzes package names using Levenshtein distance, examines publish date heuristics, and identifies download count anomalies to secure the software supply chain. Ideal for auditing project dependencies and proactively monitoring for supply chain threats.

A comprehensive guide to professional Git version control. It covers best practices for branching strategies (GitHub Flow, GitFlow, Trunk-Based), writing standardized commit messages using Conventional Commits, managing merges vs. rebases, and defining effective Pull Request workflows. Ideal for any development team looking to improve code collaboration and maintain a clean, traceable history.

An automated verification system designed for critical healthcare application deployments (EMR/EHR). This harness enforces stringent patient safety standards by running multiple mandatory test gates, including Clinical Decision Support System (CDSS) accuracy, Protected Health Information (PHI) leakage prevention, and data integrity checks. A single failure in critical gates automatically blocks deployment, ensuring regulatory compliance and optimal patient safety in the CI/CD pipeline.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.

A comprehensive guide for implementing phishing-resistant multi-factor authentication using FIDO2/WebAuthn protocols. Learn to build a complete relying party server using Python, supporting both roaming hardware keys (e.g., YubiKey) and platform biometrics. Covers registration ceremonies, credential storage, and migrating to passwordless authentication.

A comprehensive guide and technical framework for detecting and mitigating ransomware kill switch mechanisms. It details methods for analyzing mutex guards, domain-based communication, and registry checks. Learn how to deploy proactive mutex vaccination and use Sysmon/DNS monitoring to prevent malware execution during incident response and analysis.

This comprehensive tool generates high-quality Mermaid diagram code (including flowcharts, sequence diagrams, ER diagrams, etc.) directly from natural language user requirements. It handles complex structured output, mandatory syntax validation using dedicated CLI tools, and detailed visual review to ensure the accuracy of all components and connections.

This tool facilitates comprehensive purple team exercises by executing Atomic Red Team tests mapped to MITRE ATT&CK techniques. It is primarily used for gap analysis, validating detection coverage (blue team visibility) against specific threat vectors, and building continuous, automated adversarial emulation pipelines in CI/CD environments.

repo-scan is a powerful tool designed to audit large, complex, cross-stack codebases (C++, Java, iOS, Web). It classifies every file into project code, third-party dependencies, or build artifacts. Key features include detecting embedded libraries (e.g., FFmpeg, OpenSSL) and providing a practical 4-stage assessment (Core Asset / Extract / Refactor / Deprecate) via an interactive HTML report. Essential for managing monorepos and planning major refactoring efforts.