Skill UI

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.

A comprehensive runbook for standardizing incident response to Deepgram production issues. It guides users through automated triage (checking status, API connectivity, and model performance), severity classification (SEV1-SEV4), and implementing mitigation strategies, including building fallback services and replaying failed requests to ensure business continuity during outages or degradation.

Master the complete penetration testing lifecycle, covering all five stages from reconnaissance and scanning to vulnerability analysis using OWASP standards, and advanced exploitation techniques with tools like Metasploit. This skill provides a structured framework for conducting authorized, professional security assessments.

A comprehensive runbook providing standard operating procedures for handling Granola service disruptions, ranging from minor recording failures and sync errors to full organizational outages. It guides users and IT admins through triage (P1-P4 severity), detailed remediation steps, and escalation paths to ensure business continuity.

This skill specializes in implementing Service Level Objectives (SLOs) and Service Level Indicators (SLIs) to enforce reliability standards. It guides users in designing comprehensive SLO frameworks, calculating error budgets, and building robust monitoring systems. Use this when you need to establish data-driven reliability targets, balance feature velocity with technical health, and align service performance directly with core business objectives.

A comprehensive guide for designing and managing document control systems for ISO 13485-compliant Quality Management Systems (QMS), specifically tailored for the medical device industry. This resource covers document numbering, version control, change management workflows, approval processes, and ensures compliance with rigorous standards like 21 CFR Part 11, including electronic signatures and audit trails.

This skill provides a comprehensive suite for executing load testing, stress testing, and performance benchmarking. Use it to simulate peak traffic, identify system bottlenecks, and verify compliance with Service Level Agreements (SLAs). It supports industry-standard tools like k6, Artillery, Locust, and JMeter for robust performance analysis.

This skill enables comprehensive audit logging for Windsurf Enterprise deployments. It covers tracking of AI interactions, file access events, authentication changes, and overall configuration modifications. It is essential for maintaining strict compliance standards and performing detailed security audits, particularly when the user mentions audit or compliance keywords.