Skill UI

Manages production-grade secret infrastructure, covering Vault clusters, cloud secret stores, auth methods, rotation, and audit patterns to harden DevOps pipelines and respond to leaks.

This guide details how to analyze comprehensive Zeek network logs (conn.log, smb_files.log, ntlm.log, dce_rpc.log, etc.) to detect advanced attacker techniques. It specifically targets indicators of compromise related to lateral movement, such as SMB admin share access, NTLM account spraying, and remote service execution (DCE/RPC patterns). It is a critical network forensics tool for post-incident investigation.

This tool monitors Modbus TCP communication within SCADA and ICS environments to detect security anomalies. It performs deep packet inspection, baselines normal communication patterns (e.g., typical function code distribution, register access), and applies statistical analysis to identify unauthorized register writes, reconnaissance attempts, or denial-of-service attacks targeting industrial control devices.

This skill helps users create specialized 'steering documents' or project memory for highly specific domains (e.g., API standards, testing strategies, security patterns). By analyzing the existing codebase and following predefined architectural principles, it synthesizes concise, actionable guides that capture technical patterns, best practices, and domain-specific rules, ensuring project consistency and knowledge retention.

This guide provides comprehensive strategies for scaling datasets that exceed the capacity of a single node. It covers various architectural patterns, including multi-tenancy with payload partitioning and sliding time window management. We detail the full scaling progression, from optimizing a single node (Vertical Scaling) to distributing data across multiple nodes via sharding (Horizontal Scaling), ensuring reliable handling of massive, growing datasets.

Master the setup of enterprise-grade Role-Based Access Control (RBAC) within Snowflake. This guide covers defining custom role hierarchies, managing system roles, granting granular object privileges, and integrating advanced security features like SAML/OIDC-based Single Sign-On (SSO) and SCIM for automated user provisioning. Essential for implementing least-privilege access patterns and robust data governance.

A comprehensive guide and pattern library for reviewing, troubleshooting, and safely modifying Cisco IOS and IOS-XE configurations. This skill outlines best practices for using read-only 'show' commands, validating ACL wildcard masks, managing configuration hierarchy, and following stringent change control procedures to prevent network disruptions.

This skill provides comprehensive management for Opencode's permission system. It allows users to review currently always-allowed commands, suggest safe read-only commands, and configure granular access controls using allow/deny/ask patterns. It is essential for optimizing security, performing system audits, and managing the operational scope of the agent.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

A comprehensive guide and pattern library for reviewing, troubleshooting, and safely modifying Cisco IOS and IOS-XE configurations. This skill outlines best practices for using read-only 'show' commands, validating ACL wildcard masks, managing configuration hierarchy, and following stringent change control procedures to prevent network disruptions.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

Provides comprehensive guidelines for authors submitting papers to Acta Automatica Sinica (AAS). It details how to organize and present anonymous, reproducible code, data, and experimental artifacts to enhance the credibility and rigor of research in control, automation, and pattern recognition, supporting the double-blind review process.