Skill UI

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

Master the complete penetration testing lifecycle, covering all five stages from reconnaissance and scanning to vulnerability analysis using OWASP standards, and advanced exploitation techniques with tools like Metasploit. This skill provides a structured framework for conducting authorized, professional security assessments.

A comprehensive checklist for securely deploying and validating applications using Firecrawl's core APIs (scrape, crawl, map, extract) in a production environment. It covers critical areas including secure credential management, implementing crawl safety limits, robust error handling (rate limits, authentication failures), establishing monitoring alerts, and executing necessary rollback procedures.

A comprehensive runbook for rapid incident response concerning Ideogram API outages, authentication failures, and performance degradation. It provides detailed triage scripts, decision flows based on HTTP status codes (401, 429, 5xx), immediate mitigation actions (e.g., enabling fallback mode), and structured templates for communication and postmortems.

A comprehensive runbook providing step-by-step procedures for managing production incidents related to Linear integrations. It guides users through diagnosing outages, checking API authentication, managing rate limits, and resolving webhook failures, ensuring a quick and effective response across various severities.

Comprehensive patterns and best practices for deploying and managing microservices using the Linkerd service mesh on Kubernetes. Covers automatic mTLS, sophisticated traffic splitting for canary deployments, setting Service Profiles for enhanced resilience (retries/timeouts), and defining robust authorization policies.

This skill enables comprehensive audit logging for Windsurf Enterprise deployments. It covers tracking of AI interactions, file access events, authentication changes, and overall configuration modifications. It is essential for maintaining strict compliance standards and performing detailed security audits, particularly when the user mentions audit or compliance keywords.

A comprehensive guide for digital forensics analysts to investigate compromised Linux systems. This workflow details the collection and analysis of critical system artifacts, including authentication logs, shell histories, SSH keys, and system configurations. Use this methodology during incident response to detect rootkits, unauthorized persistence mechanisms, and reconstruct full attacker activity.

This skill provides a comprehensive guide to establishing SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers the architecture, prerequisites, and practical steps (including PowerShell scripting) required to achieve seamless Single Sign-On (SSO) and centralized authentication authority for hybrid environments and third-party SaaS applications.