Skill UI

Zeek is a powerful, open-source network analysis framework that functions as a passive security monitor. It generates highly detailed, structured logs (e.g., HTTP, DNS, TLS) from raw network traffic, allowing for deep metadata extraction. This skill guides users through deploying Zeek, writing custom detection scripts, and integrating the resulting rich security logs with SIEM platforms for advanced threat detection and forensic investigations.

A comprehensive tool designed for assessing the security posture of Programmable Logic Controller (PLC) firmware. It specializes in detecting critical vulnerabilities such as hardcoded credentials, undocumented debug interfaces, backdoor functions, and memory corruption flaws. The tool supports analyzing major industrial platforms (Siemens, Allen-Bradley) by performing static and dynamic analysis, and verifying firmware integrity against known-good baselines, adhering to standards like IEC 62443. Use only in authorized lab environments.

A comprehensive skill for auditing service accounts across complex enterprise environments, including Active Directory, major cloud platforms (AWS, Azure, GCP), and databases. It identifies risks such as orphaned accounts, over-privileged access, and non-compliant credentials, ensuring adherence to industry standards like SOX, PCI DSS, and HIPAA. Used during security assessments and compliance reviews.

This skill guides the hardening of managed Kubernetes clusters (EKS, AKS, GKE) by implementing critical cloud security best practices. It covers enforcing Pod Security Standards, deploying Network Policies for least privilege communication, and configuring Workload Identity to eliminate static cloud credentials. Ideal for production deployments or remediation after a security audit.

This skill performs in-depth literature reviews across complex communications domains, including 5G/6G, Wi-Fi, satellite networking, and advanced protocols. It systematically searches user-defined knowledge bases (Zotero, Obsidian, local files) and major academic databases (IEEE, ACM, ScienceDirect) to provide comprehensive survey summaries, related work analyses, and technical landscape overviews.

This tool monitors Modbus TCP communication within SCADA and ICS environments to detect security anomalies. It performs deep packet inspection, baselines normal communication patterns (e.g., typical function code distribution, register access), and applies statistical analysis to identify unauthorized register writes, reconnaissance attempts, or denial-of-service attacks targeting industrial control devices.

Assesses organizational readiness for migrating cryptographic systems to post-quantum standards (PQC), aligning with NIST guidelines. The tool performs comprehensive cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA) and evaluates the feasibility of implementing hybrid TLS configurations using standards like ML-KEM and ML-DSA. Essential for implementing crypto-agility across enterprise infrastructure.

This advanced workflow automates the process of analyzing the operational health of specific Azure resources. It ingests and analyzes raw logs, telemetry data, and performance metrics from diverse Azure services (e.g., VMs, Web Apps, Databases). The system performs comprehensive root cause analysis, classifies issues (Critical, High, Medium), and generates actionable, step-by-step remediation plans, significantly reducing manual troubleshooting time.

A comprehensive guide to implementing Role-Based Access Control (RBAC) in ClickHouse. Learn how to manage user authentication, define hierarchical roles, enforce row-level security (RLS) for tenant isolation, restrict data access via column-level grants, and manage resource consumption using quotas and settings profiles. Essential for multi-tenant SaaS and secure data analytics platforms.

A comprehensive guide for deploying Attio-powered applications to major production platforms including Vercel, Fly.io, Cloud Run, and Railway. This guide covers essential DevOps practices such as secure secrets injection, robust health check endpoints, webhook URL configuration, and platform-specific deployment commands to ensure reliable, production-grade integration.

This skill performs comprehensive, systematic cleanup across 11 critical dimensions of code quality, including dead code removal, security vulnerability checks, weak type elimination, and performance optimization. It analyzes code, assigns confidence scores, and verifies all suggested changes using build and test gates. Ideal for projects suffering from accumulated technical debt, or before major release cycles to ensure robust, maintainable code.

This integration facilitates the deployment of Hex orchestration services to major cloud platforms like Vercel, Google Cloud Run, and Fly.io. It is essential for setting up production environments, managing platform-specific secrets (like API tokens), and automating deployment pipelines for Hex-powered applications.