Skill UI

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.

A comprehensive runbook for rapid incident response concerning Ideogram API outages, authentication failures, and performance degradation. It provides detailed triage scripts, decision flows based on HTTP status codes (401, 429, 5xx), immediate mitigation actions (e.g., enabling fallback mode), and structured templates for communication and postmortems.

This skill enables comprehensive audit logging for Windsurf Enterprise deployments. It covers tracking of AI interactions, file access events, authentication changes, and overall configuration modifications. It is essential for maintaining strict compliance standards and performing detailed security audits, particularly when the user mentions audit or compliance keywords.

Use this skill to automatically generate robust CI/CD pipelines (GitHub Actions, GitLab CI) by analyzing the detected project stack (language, dependencies, tools). It ensures fast baseline setup, repeatable testing stages, and environment-aware deployment workflows. Ideal for onboarding new projects, standardizing multi-repo deployments, or optimizing existing, brittle pipelines.

This specialized skill acts as an expert AI auditor for Food Safety Modernization Act (FSMA) compliance. It is designed to review critical records, including HACCP plans, Preventive Controls, and Supply Chain documentation for food processing facilities. Use it to simulate FDA inspections, identify compliance gaps (such as missing CCPs or inadequate corrective actions), and receive actionable guidance to ensure the highest standards of food safety.

This module is designed to document, track, and manage quality nonconformance issues found during manufacturing or process audits. It is essential for root cause analysis, implementing corrective and preventive actions (CAPA), and ensuring compliance with industry quality standards. Use it when recording deviations from specified requirements.

This comprehensive toolkit provides deep static analysis capabilities for suspicious PDF documents. Using tools like PDFiD, pdf-parser, and peepdf, it identifies embedded malicious structures—including JavaScript code, shellcode, auto-actions, and exploit kits—without opening or rendering the file. It is essential for security analysts conducting threat triage, forensic investigation, and assessing potential attack vectors from suspicious attachments.

A comprehensive guide and technique set for detecting and exploiting race condition vulnerabilities in web applications. It focuses on bypassing rate limits, exploiting Time-of-Check-to-Time-of-Use (TOCTOU) flaws, and duplicating transactions using advanced methods like Turbo Intruder's single-packet attack. Ideal for security assessments of state-changing operations (e.g., payments, inventory management, coupon redemption).

This skill guides the implementation of Security Orchestration, Automation, and Response (SOAR) workflows using platforms like Splunk Phantom. It automates the entire incident lifecycle, including alert triage, IOC enrichment (via VirusTotal, CrowdStrike), containment actions, and ticket creation (ServiceNow). Ideal for SOC teams needing to reduce Mean Time To Respond (MTTR) and standardize complex security procedures across multiple tools.

This guide provides a systematic, step-by-step workflow for Security Operations Center (SOC) analysts to perform alert triage using Elastic Security SIEM. It covers initial alert assessment, context gathering using advanced ES|QL queries, threat intelligence enrichment, and final classification decisions (True Positive, False Positive, etc.) to rapidly determine genuine security threats and prioritize incident response actions.

This sophisticated tool automates the security review of serverless functions across major cloud providers, including AWS Lambda, Azure Functions, and GCP Cloud Functions. It systematically identifies critical misconfigurations such as overly permissive IAM execution roles (wildcard actions), hardcoded secrets in environment variables, and potential lack of runtime protections. Ideal for pre-production auditing and compliance checks.