Skill UI

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

This skill provides a structured methodology for threat hunting DNS-based persistence mechanisms. It detects unauthorized changes such as DNS hijacking, dangling CNAME records enabling subdomain takeover, wildcard DNS abuse, or unauthorized NS delegation modifications. By utilizing passive DNS history (e.g., SecurityTrails API) and auditing cloud DNS logs (Route53, Azure, Cloudflare), users can identify persistent attack vectors that survive traditional remediation efforts.

This skill guides organizations in implementing and managing security controls required by PCI DSS 4.0.1. It covers the 12 requirements across 6 control objectives for protecting cardholder data that is stored, processed, or transmitted. Use this when scoping a Cardholder Data Environment (CDE), enhancing security architecture, or preparing for mandatory PCI compliance assessments, including customized validation and MFA implementation.

This sophisticated tool automates the security review of serverless functions across major cloud providers, including AWS Lambda, Azure Functions, and GCP Cloud Functions. It systematically identifies critical misconfigurations such as overly permissive IAM execution roles (wildcard actions), hardcoded secrets in environment variables, and potential lack of runtime protections. Ideal for pre-production auditing and compliance checks.

A comprehensive guide and pattern library for reviewing, troubleshooting, and safely modifying Cisco IOS and IOS-XE configurations. This skill outlines best practices for using read-only 'show' commands, validating ACL wildcard masks, managing configuration hierarchy, and following stringent change control procedures to prevent network disruptions.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.

A comprehensive guide and pattern library for reviewing, troubleshooting, and safely modifying Cisco IOS and IOS-XE configurations. This skill outlines best practices for using read-only 'show' commands, validating ACL wildcard masks, managing configuration hierarchy, and following stringent change control procedures to prevent network disruptions.

An expert advisor trained in PCI DSS standards (v4.0.1 current) and QSA methodology. This skill provides deep guidance on compliance requirements, including CDE scoping, SAQ selection, gap assessment roadmaps, network segmentation, data tokenization, and general best practices for protecting cardholder data. Essential for security, compliance, and engineering teams.