Skill UI

This comprehensive toolkit audits and manages dependencies across multi-language projects (e.g., Python, JS, Go, Java). It identifies critical security vulnerabilities (CVE), ensures license compliance, detects outdated packages, and plans safe upgrade paths. Essential for pre-release quality assurance, vulnerability investigation, and supply chain risk management.

This skill functions as a specialized dependency security expert. It analyzes project dependencies to identify critical security vulnerabilities, licensing compliance issues, and outdated packages. It provides comprehensive, actionable remediation strategies to strengthen supply chain security.

This workflow guides SOC teams in establishing a comprehensive, structured process for vulnerability management. It utilizes major scanning tools (Nessus, Qualys, OpenVAS) to discover, prioritize, and track remediation of security weaknesses across the infrastructure. It integrates threat intelligence (CISA KEV) and asset criticality into risk scoring, ensuring resources are focused on the most critical threats.

This tool guides the deployment and configuration of the Dragos Platform for critical Operational Technology (OT) and Industrial Control System (ICS) network monitoring. It leverages over 600 industrial protocol parsers and advanced threat intelligence to detect sophisticated attacks (e.g., VOLTZITE, GRAPHITE). Use it for building an OT Security Operations Center (SOC), asset discovery, and vulnerability management in industrial settings, integrating alerts with enterprise SIEMs.

This guide details the systematic workflow for patch management, covering the entire lifecycle from vulnerability discovery and risk assessment to controlled testing, multi-phased deployment, and final verification. Learn how to integrate tools like WSUS, SCCM, and Ansible into a robust, automated process to significantly reduce the attack surface and ensure compliance across enterprise IT infrastructure.

Automate comprehensive vulnerability management by deploying and operating Greenbone/OpenVAS. This skill guides the use of the python-gvm library to programmatically manage the entire scanning lifecycle: creating scan targets, executing complex vulnerability scans via the Greenbone Management Protocol (GMP), monitoring progress, and parsing detailed XML reports into actionable JSON findings. Ideal for security assessments and compliance checks.

A comprehensive skill for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. It automates critical quality gates including unit testing (with race detection), linting, SAST (security static analysis), vulnerability scanning, code coverage enforcement, dependency management (Dependabot/Renovate), and automated binary releases (GoReleaser). Ideal for improving existing Go workflows or setting up CI from scratch.

Comprehensive guide for managing Go project dependencies, covering best practices for adding, upgrading, and removing packages. It emphasizes critical security practices like vulnerability scanning (govulncheck), supply chain verification (go mod verify), and maintaining clean module files (go mod tidy). Use this when auditing security, refactoring dependencies, or ensuring build reproducibility.

This skill provides a comprehensive framework for conducting high-quality code reviews. It guides developers through checking code across four critical dimensions: Correctness (functional accuracy and edge cases), Maintainability (readability and documentation), Performance (efficiency and resource usage), and Security (input validation and vulnerability management). It also emphasizes providing actionable, constructive, and empathetic feedback.

This router guides the testing of systemic flaws in business processes and state machines. It is essential when vulnerabilities stem from workflow abuse, race conditions, pricing flaws, or multi-step state attacks, rather than simple input sanitation issues. Use it to test complex business flows like payments, inventory management, and approval sequences.