Skill UI

A comprehensive guide to hardening container registries using Harbor. Learn how to enforce strict image provenance and deployment security by integrating vulnerability scanning (Trivy), cryptographic image signing (Cosign/Notary), granular Role-Based Access Control (RBAC), immutable tag policies, and content trust. Essential for environments requiring high compliance and robust supply chain security.

A comprehensive guide for assessing the security of JSON Web Token (JWT) implementations. This toolkit details attacks against cryptographic weaknesses, including algorithm confusion (e.g., RS256 to HS256), 'none' attacks, brute-forcing HMAC secrets, and claim manipulation. Ideal for penetration testing and security audits of modern APIs and SSO systems.

A comprehensive guide for implementing hardware-level confidential computing using AWS Nitro Enclaves. This process involves creating secure enclave images (EIFs), performing cryptographic attestation validation against the Nitro PKI, and configuring AWS KMS policies. It ensures that sensitive data (like PII or PHI) remains isolated from the parent EC2 instance, guaranteeing security even if the host system is compromised.

Assesses organizational readiness for migrating cryptographic systems to post-quantum standards (PQC), aligning with NIST guidelines. The tool performs comprehensive cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA) and evaluates the feasibility of implementing hybrid TLS configurations using standards like ML-KEM and ML-DSA. Essential for implementing crypto-agility across enterprise infrastructure.

This skill provides a comprehensive framework for validating backup reliability. It automates processes like cryptographic hash verification, running simulated restores to isolated environments, detecting silent data corruption (bit rot), and scanning for ransomware indicators. Use it before relying on backups during a major incident or ransomware attack to ensure data recoverability and compliance.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.

Provides a comprehensive, production-ready deployment solution for OneNote integrations in containerized environments. This skill addresses critical issues like MSAL token persistence (supporting both file and Redis caches), implementing deep health/readiness checks that validate actual Graph API connectivity, and managing graceful shutdowns. Ideal for containerizing OneNote services for robust, scalable production use with Docker and Kubernetes.

A comprehensive guide for cryptanalysts detailing advanced attack vectors against RSA cryptography. This playbook covers factorization methods, small exponent exploits (e.g., Hastad Broadcast), lattice-based attacks (Wiener's, Boneh-Durfee), and methods exploiting protocol weaknesses like padding oracles. Essential for CTF challenges and authorized security assessments.

This skill proactively hunts for advanced firmware threats, including UEFI bootkits (e.g., BlackLotus, ESPecter), residing in the EFI System Partition (ESP). It establishes a cryptographic baseline, verifies bootloader signatures, scans for out-of-band changes, and uses YARA rules to detect persistence mechanisms related to pre-OS compromise (MITRE ATT&CK T1542.003). Ideal for forensic investigations and security hardening.

A comprehensive guide for engineering the migration from classical public-key cryptography to quantum-resistant standards. This skill covers building a Cryptographic Bill of Materials (CBOM) to inventory assets, prioritizing migration based on Harvest-Now-Decrypt-Later (HNDL) risk, and deploying hybrid PQC key exchange (e.g., X25519MLKEM768) on critical channels like TLS, VPN, and SSH. Essential for achieving long-term quantum readiness and crypto-agility.

A comprehensive framework for advanced sensing utilizing WiFi signals. It implements multistatic radar sensing, cross-viewpoint data fusion, RF tomography for volumetric imaging, and persistent field modeling. Features include pre-movement intention detection, biomechanics drift tracking, and robust mesh security hardening for research-grade deployments.

This guide helps authors assess the suitability and optimal framing of their computer animation manuscript for the ACM SIGGRAPH/Eurographics Symposium on Computer Animation (SCA). It provides strategic advice on required evidence, scope calibration, contribution types (e.g., physics simulation, character motion, crowds), and how to position the work against top-tier CS conference standards. Use this when submitting animation-related research.