Skill UI

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.

This comprehensive guide details how to implement robust security hardening measures for LDAP directory services. It specifically addresses critical vulnerabilities like LDAP injection, anonymous binding, and channel binding bypass. Key features include mandatory LDAPS enforcement, granular access control list configuration, and integrating advanced monitoring to ensure the infrastructure meets high compliance standards (e.g., NIST 800-53). Essential for security architects and operations teams.

This guide details how to implement Kubernetes Pod Security Standards (PSS) using the Pod Security Admission (PSA) controller. PSS defines three mandatory security levels—Privileged, Baseline, and Restricted—for container workloads. It is essential for enhancing security posture, ensuring compliance, and migrating away from deprecated PodSecurityPolicy (PSP) controls by applying namespace labels and defining compliant pod specifications.

A comprehensive guide to deploying Zero Standing Privilege (ZSP) using CyberArk Secure Cloud Access. This solution eliminates persistent privileged access by provisioning ephemeral, Just-in-Time (JIT) credentials across hybrid and multi-cloud environments (AWS, Azure, GCP). Access is strictly governed by the TEA framework: Time limits, scoped Entitlements, and mandatory Approvals, ensuring the principle of least privilege is maintained.

This skill activates the P7 Senior Engineer mode, designed for rigorous, solution-driven execution under P8 supervision. It is used when the user explicitly requests 'P7模式' or when invoked as a sub-task executor by P8. The process involves three key stages: designing a detailed implementation plan and impact analysis, executing the core coding, and finally, completing a mandatory three-question self-review, ensuring high quality and comprehensive verification.

A comprehensive toolkit for medical device manufacturers seeking ISO 13485 certification. This skill guides users through gap analysis, creating mandatory Quality Management System (QMS) documentation, and ensuring compliance with global medical device regulations (e.g., EU MDR, FDA QMSR). It provides templates, guidance, and structured processes for foundational QMS documents like Quality Manuals and CAPA procedures.

A comprehensive playbook detailing advanced techniques for post-exploitation security bypass on Linux systems. Covers escaping restricted shells (rbash), evading noexec/read-only filesystems using in-memory execution (DDexec, memfd_create), and circumventing mandatory access controls like AppArmor and SELinux. Essential for penetration testing and red team operations.

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).