Skill UI

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

Validates SKILL.md files against the agentskills specification and Anthropic best practices, catching structure, semantic, naming, and quality issues in a single read-only pass before publishing or debugging skills.

This comprehensive tool validates Claude Code plugins against official Anthropic specifications and internal enterprise standards. It performs two main types of checks: structural validation (checking `plugin.json` fields, file references, and permissions) and content validation (conducting deep grading using `SKILL.md`). Use this when building, auditing, or preparing plugins for marketplace submission to ensure compliance and quality.

Defines a structured response workflow for Microsoft Patch Tuesday, covering advisory triage, vulnerability scanning, ring-based deployment, and validation within risk-based SLAs.

Guides comprehensive API security testing for REST, GraphQL, and gRPC services using the OWASP API Security Top 10, combining Burp Suite, Postman, and custom scripts to validate authentication, authorization, rate limiting, input validation, and business logic defenses.

Provides structured methodologies for authorized AWS, Azure, and GCP penetration tests, covering scoping, reconnaissance, IAM privilege escalation, SSRF-to-metadata validation, and MITRE ATT&CK Cloud reporting.

Use BloodHound CE to map Active Directory attack paths, import SharpHound collections, run custom Cypher queries, and prioritize escalation chains for red team reconnaissance and security validation.

Simulates MITM attacks with Ettercap, mitmproxy, and Bettercap in authorized labs to test TLS validation, spoofing detection, and incident response controls while validating logging and credential interception workflows.

Guides comprehensive pen tests covering discovery, scanning, enumeration, vulnerability validation, controlled exploitation, and reporting to benchmark network security and compliance readiness.

Configures OAuth 2.0 flows (Authorization Code with PKCE, Client Credentials, Device Authorization) with secure scope, token lifecycle, PKCE validation, and RFC 9700 guidance so teams can deploy compliant IAM controls.

Analyzes Zeek dns.log to flag DNS tunneling by computing subdomain entropy, long labels, unique counts and query volumes, scoring domains and emitting structured JSON reports for SOC investigations and monitoring validation.

Detect Kerberos Pass-the-Ticket attacks by correlating Windows Security Event IDs 4768, 4769, and 4771 inside Splunk or Elastic SIEM, flagging ticket reuse, RC4 downgrades, and unusual service ticket volumes for SOC hunting and coverage validation.