Skill UI

A comprehensive guide for deploying complex integrations to production cloud environments (GCP, Kubernetes). This skill covers best practices including creating multi-stage Dockerfiles, implementing robust health and readiness checks, and utilizing cloud tools like gcloud and kubectl for seamless, secure deployment with secret management.

This comprehensive guide details physical intrusion assessment methodologies, simulating real-world security threats. Techniques covered include tailgating, RFID badge cloning, mechanical lock bypassing, and deploying rogue network devices. It is designed for full-scope red team engagements to evaluate the integrity of physical security controls and map potential paths to network access.

This advanced code review skill forces genuine perspective shifts by employing three hostile reviewer personas: the Saboteur (production breaks), the New Hire (maintainability), and the Security Auditor (OWASP-informed). It ensures that all code reviews are critically rigorous, eliminating superficial "Looks Good To Me" approvals and catching blind spots missed by the original author or general AI models. Use it before merging a PR for maximum confidence.

This guide provides comprehensive best practices for creating optimized, secure, and efficient multi-stage Dockerfiles. Learn how to separate build environments (builder stage) from minimal runtime environments, significantly reducing image size and attack surface. Topics covered include layer caching optimization, security hardening (non-root users), and using minimal base images for reproducible builds.

A comprehensive guide for securing container images and runtime environments. Covers best practices from Dockerfile authoring (minimal base images, multi-stage builds, non-root users) through advanced runtime enforcement (seccomp, AppArmor) and Kubernetes security controls. Essential for production hardening and maintaining supply chain integrity.

This guide details the comprehensive process for preparing security research artifacts for post-acceptance evaluation at major conferences like IEEE S&P. It covers the three types of evaluation badges (Available, Functional, Results Reproduced), strict handling constraints for exploits and malware, and best practices for packaging the submission (e.g., Dockerfiles, README structure) to ensure external evaluators can reliably reproduce findings within a limited time frame.