Skill UI

Monitor the operational health of PostHog integrations by tracking critical metrics. This skill checks event ingestion rates, feature flag evaluation latency, and monitors billing volume consumption. It also provides rules for Prometheus/Grafana alerting, ensuring data pipelines remain stable and alerting on potential performance bottlenecks or exceeding API limits.

A comprehensive guide for implementing ISO 14971:2019 risk management across the entire medical device lifecycle. Covers planning, hazard identification, risk analysis (FMEA, FTA), risk evaluation, risk control, and post-market surveillance. Essential for achieving regulatory compliance in medical device development.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

This guide provides a comprehensive walkthrough for deploying, configuring, and tuning Snort 3. It covers essential steps such as setting network interfaces to promiscuous mode, writing custom rules using Lua, integrating with SIEM platforms, and utilizing community rulesets. Ideal for network security professionals implementing robust, signature-based intrusion detection at critical network boundaries.

This skill guides the comprehensive evaluation and selection of Threat Intelligence Platforms (TIPs). It assesses vendor capabilities, including STIX/TAXII support, workflow automation, SIEM/SOAR integration, and total cost of ownership. It is essential for procurement decisions, migrating between TIP solutions, or assessing whether the current CTI program meets required maturity levels.

A comprehensive toolkit for analyzing ELF binaries to locate memory-corruption vulnerabilities, such as buffer overflows and ROP chains. This skill is vital for authorized penetration testing and CTF challenges, allowing users to evaluate compiler mitigations (ASLR, NX, Canary, PIE) and develop robust proof-of-concept exploits.

This skill teaches authorized users how to perform comprehensive password hash cracking using Hashcat. It covers various attack methodologies, including dictionary, brute-force, and rule-based attacks, and identification of common hash types (e.g., MD5, NTLM, bcrypt). The primary use case is for conducting controlled security assessments and penetration testing to evaluate password strength and compliance with current security policies. Always used under explicit authorization.

This comprehensive guide provides a systematic methodology for performing Kubernetes cluster penetration testing. It evaluates security by simulating diverse attacker techniques against key components such as the API server, etcd, RBAC policies, and network configurations. Users can identify critical misconfigurations and vulnerabilities using specialized tools (kube-hunter, Kubescape, kube-bench) and manual exploitation steps, ensuring clusters meet robust security standards. Ideal for authorized security audits and compliance validation.

A comprehensive assessment tool for the cybersecurity posture of oil and gas critical infrastructure. It covers upstream, midstream, and downstream facilities, evaluating SCADA, DCS, and SIS systems against industry standards like API 1164, IEC 62443, and TSA directives. Ideal for preparing for regulatory compliance audits and identifying security gaps in industrial control systems.

This comprehensive guide details physical intrusion assessment methodologies, simulating real-world security threats. Techniques covered include tailgating, RFID badge cloning, mechanical lock bypassing, and deploying rogue network devices. It is designed for full-scope red team engagements to evaluate the integrity of physical security controls and map potential paths to network access.

This skill assesses SSL/TLS server configurations using the sslyze Python library. It evaluates critical security parameters including supported protocol versions (TLS 1.0-1.3), cipher suite strength, certificate chain validation, HSTS enforcement, and known vulnerabilities like Heartbleed and ROBOT. Essential for security audits and compliance testing.

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.