Skill UI

A comprehensive guide to implementing least-privilege security for AWS Lambda execution roles. It details the process of auditing existing permissions, analyzing actual API usage via CloudTrail and IAM Access Analyzer, creating narrowly scoped IAM policies, and enforcing strict permission boundaries (SCPs) to eliminate over-privileging and minimize the blast radius.

This skill provides a comprehensive guide to hardening managed Kubernetes clusters on major cloud platforms (EKS, AKS, GKE). It details implementing critical security layers, including Pod Security Standards, least-privilege network policies, workload identity (eliminating static cloud credentials), and runtime security monitoring. Essential for securing production environments and meeting compliance requirements.

This guide details implementing an IEC 62443 compliant conduit architecture for secure remote access into Operational Technology (OT) environments. It mandates the use of jump servers, MFA gateways, session recording, and approval workflows within a DMZ to strictly control vendor and engineer access, eliminating direct VPN connections to critical ICS assets.

This tool provides a structured methodology for assessing the security posture of SCADA Human-Machine Interface (HMI) systems. It evaluates potential vulnerabilities in web-based HMIs, thin-client configurations, authentication mechanisms, and communication pathways between HMIs and PLCs, ensuring compliance alignment with rigorous standards like IEC 62443 and NIST SP 800-82.

This comprehensive skill provides a systematic framework for performing deep security assessments on iOS applications. It covers static analysis of IPA packages, dynamic instrumentation using Frida and Objection, SSL pinning bypass for traffic interception, extraction and auditing of sensitive data from the Keychain, and runtime method hooking. Use this for authorized penetration testing against standards like OWASP MASTG.

Assesses organizational readiness for migrating cryptographic systems to post-quantum standards (PQC), aligning with NIST guidelines. The tool performs comprehensive cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA) and evaluates the feasibility of implementing hybrid TLS configurations using standards like ML-KEM and ML-DSA. Essential for implementing crypto-agility across enterprise infrastructure.

This skill provides a comprehensive, evidence-based inventory and overlap audit workflow for enterprise automation. It helps users determine which jobs, hooks, connectors, or wrappers are currently live, broken, redundant, or missing before making critical changes, ensuring reliable system architecture and clean code practices.

This skill activates the P7 Senior Engineer mode, designed for rigorous, solution-driven execution under P8 supervision. It is used when the user explicitly requests 'P7模式' or when invoked as a sub-task executor by P8. The process involves three key stages: designing a detailed implementation plan and impact analysis, executing the core coding, and finally, completing a mandatory three-question self-review, ensuring high quality and comprehensive verification.

A comprehensive toolkit for medical device manufacturers seeking ISO 13485 certification. This skill guides users through gap analysis, creating mandatory Quality Management System (QMS) documentation, and ensuring compliance with global medical device regulations (e.g., EU MDR, FDA QMSR). It provides templates, guidance, and structured processes for foundational QMS documents like Quality Manuals and CAPA procedures.

A comprehensive reference architecture guide for deploying and managing CAST AI across multiple Kubernetes clusters (Dev, Staging, Prod). It details best practices for infrastructure provisioning using Terraform, focusing heavily on cost optimization techniques such as autoscaling, spot instance management, and environment-specific resource policies. Ideal for setting up team standards and ensuring reliable, cost-effective deployments.

A comprehensive runbook providing structured guidance for rapid incident response when encountering failures with the Canva Connect API integration. It guides users through initial triage (checking status, error rates), outlines immediate mitigation strategies for common API errors (401, 429, 5xx), and covers standardized communication templates and detailed post-incident procedures, including log collection and root cause analysis.

This skill performs a rigorous, adversarial review of implemented code. It verifies that the task implementation is complete, structurally sound, respects defined boundaries, and aligns perfectly with approved requirements and design specifications. Use it after an implementer finishes work, or before final acceptance, to ensure code quality and architectural integrity.