Skill UI

A specialist tool designed to generate, format, and validate comprehensive technical documentation. It supports multiple standards, including Google/NumPy docstrings (for Python), JSDoc (for TypeScript), and full OpenAPI/Swagger specifications. Key features include automated detection of code languages and frameworks, robust validation of code examples (using tools like doctest and OpenAPI linters), and generating structured user guides or site configurations.

Automates code injection detection guidance as part of Security Fundamentals, offering step-by-step advice, best-practice patterns, and production-ready snippets for authentication, input validation, and secure coding scenarios.

Automated guidance for cookie security analysts that covers authentication, validation, secure coding, and vulnerability detection while generating production-ready code and configurations.

Assists with security fundamentals by auto-activating when asked about https certificate checker tasks, guiding through detection patterns, secure coding, and validation workflows for reliable certificate handling.

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.

This comprehensive checklist guides the operational validation of the Juicebox AI talent search and analysis platform in a production environment. It ensures system reliability, data security, and service continuity by reviewing critical areas such as API key management, rate limit handling, robust error detection (circuit breakers, exponential backoff), data encryption (GDPR/CCPA compliance), and comprehensive monitoring setup. It is essential for preventing service failures and maintaining search data integrity.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

Automates the creation and validation of security headers by guiding users through authentication, input validation, secure coding, and vulnerability detection practices within the Security Fundamentals domain.

Session Security Guide supplies automated, production-ready assistance for session security checker tasks, offering best practice guidance on authentication, validation, secure coding, and vulnerability detection.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

This skill leverages the VirusTotal API to perform comprehensive threat intelligence enrichment on file hashes (MD5, SHA-1, SHA-256). It retrieves detection rates from 70+ AV engines, behavioral sandbox reports, associated indicators of compromise (IOCs), and contextual threat data. Use this tool for rapid SOC triage, accurate incident response validation, and enhancing threat hunting workflows.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.