Skill UI

Automated guidance for cookie security analysts that covers authentication, validation, secure coding, and vulnerability detection while generating production-ready code and configurations.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

Automates the creation and validation of security headers by guiding users through authentication, input validation, secure coding, and vulnerability detection practices within the Security Fundamentals domain.

A comprehensive toolkit for the full software development lifecycle. It guides stack selection using a detailed decision engine, automatically scaffolds complex boilerplate projects across multiple popular stacks (Next.js, MERN, FastAPI, Django), and provides deep code quality analysis. Features include security vulnerability detection, complexity scoring, and dependency auditing, ensuring high-quality development from the start.

Session Security Guide supplies automated, production-ready assistance for session security checker tasks, offering best practice guidance on authentication, validation, secure coding, and vulnerability detection.

Leverages Monte Carlo-based simulation to spot potential software vulnerabilities by feeding randomized inputs into modules, tracking failure likelihoods, and highlighting risky code paths for security testing.

A guide and implementation pattern for deploying Nozomi Networks Guardian sensors. This solution enables passive, non-disruptive monitoring of Operational Technology (OT) and Industrial Control Systems (ICS). It provides critical asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment, making it essential for building robust OT Security Operations Centers (SOCs) and ensuring compliance without risking live operations.

This skill provides a comprehensive framework for building an automated Service Level Agreement (SLA) breach alerting system for vulnerability remediation. It covers defining severity-based SLA policies (Critical, High, Medium, Low), structuring a database schema for tracking, implementing breach detection logic, and dispatching multi-channel escalation notifications (Email, Slack, PagerDuty). Essential for achieving compliance and improving overall security posture.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

This comprehensive guide details how to configure and manage GitHub Dependabot. It covers everything from setting up initial dependency updates (npm, pip, docker, etc.) to advanced strategies like monorepo glob patterns, cross-directory grouping, and multi-ecosystem updates. Learn how to automate dependency vulnerability detection and version upgrades efficiently.

This skill provides a comprehensive, structured methodology and checklist for identifying Remote Code Execution (RCE) vulnerabilities across various web applications. It covers advanced attack vectors such as OS command injection, Server-Side Template Injection (SSTI), insecure deserialization, file upload flaws, and XXE. Use this guide during web application penetration testing or bug bounty hunting to systematically discover arbitrary code execution paths.