Skill UI

A specialized downstream skill for deep analysis of complex web rendering pipelines. Use this to trace vulnerabilities or logical flaws residing in Server-Side Rendering (SSR), template data, route loaders, or client-server hydration boundaries. It compares template-level gating against backend handler enforcement to pinpoint the decisive weak point in the render chain.

This tool performs a rapid, heuristic security assessment focused on identifying common vulnerabilities listed in the OWASP Top 10. It scans source code for hardcoded secrets, SQL injection risks, XSS vectors, insecure dependencies, and authentication flaws. It is ideal for pre-commit checks or code reviews before merging sensitive changes.

This skill conducts comprehensive governance, legal, and risk reviews for AI use cases. It assesses internal deployments, product features, and third-party vendors against best practices, privacy laws, and corporate policies. It guides users through structured intake, identifies compliance gaps, and generates formal review reports, scorecards, and remediation plans.

A systematic methodology for performing offensive cryptographic analysis. This skill focuses on identifying and exploiting flaws arising from the misuse of cryptographic primitives in real-world applications, rather than breaking the underlying math. Techniques covered include Padding Oracle Attacks (CBC), ECB block manipulation, Hash Length Extension, RSA weaknesses, and PRNG exploitation. Ideal for penetration testing and deep security auditing.

Configure and build PixiJS v8 render layers by creating async Applications, loading textures via Assets, composing scene graphs with Containers and Sprites, driving ticker loops, handling pointer events, and grouping draws with render groups. Use this skill for initializing PixiJS v8 projects, debugging canvas issues, and managing 2D graphics rendering pipelines.

Conduct periodic access reviews and certifications for AWS IAM, GitHub, Okta, and other identity providers, with automated reporting, certification workflows, and unused permission detection.

Build intelligent Alexa voice skills and turn Alexa into a Claude-powered assistant (Auri). Integrate with the AWS ecosystem including Lambda, DynamoDB, Polly, Transcribe, Lex, and Smart Home devices.

Conduct authorized security assessments for REST, GraphQL, and WebSocket APIs. Covers discovery, authentication flaws (JWT/OAuth), authorization bypasses (BOLA/IDOR), rate limiting, and a structured 10-phase testing workflow using specialized tools.

Comprehensive expert for deploying and managing AI agents at scale using AWS Bedrock AgentCore. Covers nine core services including Gateway, Runtime, Memory, Identity, Code Interpreter, Browser, Observability, Agent Registry, and Evaluations. Provides deployment patterns, integration workflows, and AWS CLI usage.

This skill provides expert guidance for building AWS cloud infrastructure using the Cloud Development Kit (CDK) with TypeScript or Python. It covers best practices for resource naming, Lambda function development, and multi-layer validation strategies using tools like cdk-nag. Integrated MCP servers assist with AWS knowledge access and CDK utilities, ensuring secure and compliant infrastructure deployment.

Configure AWS CloudTrail to enable organization-wide audit logging for compliance and security investigation. This skill covers setting up S3 buckets for log storage, applying security policies, enabling encryption, and creating trails for multi-region activity. It includes configuring event selectors for management and data events, and setting up CloudWatch alarms for unauthorized API calls to meet standards like SOC 2 or HIPAA.

This tool automates compliance validation against industry standards including CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 benchmarks. It helps validate AWS configurations, prepare for audits, and maintain continuous compliance monitoring. Users can generate reports and check specific regulatory requirements efficiently.