Skill UI

ScoutSuite is an open-source, agentless tool designed for comprehensive AWS security posture assessment. It queries AWS APIs to automatically enumerate resources across various services, identify critical misconfigurations (like public S3 buckets or overly permissive IAM roles), and generate an interactive HTML report. It is ideal for conducting cloud security audits, compliance checks, or incident response procedures using read-only credentials.

This tool automates the security audit of Docker environments using the open-source CIS Docker Benchmark. It assesses host configuration, daemon settings, container images, and runtime controls, generating a comprehensive pass/fail/warn compliance report. It is essential for ensuring CIS compliance, validating security hardening, and automating scheduled container security testing.

This skill provides a comprehensive framework for performing authorized penetration testing on Google Cloud Platform (GCP). It uses specialized tools like GCPBucketBrute to enumerate publicly accessible storage buckets and audits IAM policies to identify overly permissive role bindings. The process includes checking service account keys and mapping potential privilege escalation paths, generating actionable, risk-scored reports for robust cloud security posture management.

This skill provides comprehensive API calls using `curl` to interact with the CAST AI platform. It allows users to list connected Kubernetes clusters, retrieve detailed cost savings reports, and inspect the inventory of managed nodes. It is essential for verifying connectivity, auditing cloud spending, and monitoring resource allocation after onboarding.

Run comprehensive, read-only exposure checks against your local machine or project directories in response to security advisories and CVEs. This tool systematically checks various ecosystems (Node.js, Python, Homebrew, etc.) to generate a structured, non-invasive audit report, helping users understand their actual risk exposure without making any system changes.

This guide provides expert principles for designing and auditing system-level experiments in computer architecture (e.g., for ASPLOS-level conferences). It details the proper usage of various instruments—from real silicon and FPGAs to cycle-level simulators and analytical models—ensuring that every claim is matched to a valid, stated error model. It emphasizes workload selection, establishing strong baselines, performing rigorous ablation studies, and honestly reporting measurement noise and limitations to maintain scientific credibility.

This guide provides comprehensive standards for designing, auditing, and reporting empirical evaluations in database systems research. It emphasizes the principle that evidence must proportionally match the claim, requiring the use of real-world workloads, fair and tuned baselines, thorough measurement of variance and state (warm/cold), and fully reproducible evaluation harnesses. It also outlines the higher bar for 'Experiments & Analysis' papers.

A comprehensive guide for auditing and improving the scientific rigor of hardware architectural evaluations (e.g., HPCA style). It emphasizes establishing a clear 'fidelity contract' defining tools, scope, and configurations. It requires that all performance claims are backed by credible instruments, mandates capturing full machine state provenance, ensuring honest baseline tuning, and reporting results via per-workload distributions rather than single means.

This guide outlines the rigorous standards for achieving robust reproducibility in robotics research papers, especially those involving physical hardware. It details a two-tier approach, defining results as either fully *rerunnable* (code/simulation) or fully *auditable* (hardware logs/protocols). Key requirements include creating comprehensive hardware specification ledgers, logging detailed sensor data (rosbags), separating deterministic from stochastic claims, and structuring the entire repository for peer review.

A comprehensive guide for designing, auditing, and reporting reliable robotic experiments, particularly for major conferences like IROS. It moves beyond simple success rates, detailing how to map every claim to verifiable evidence (trials, simulations, field data). Key areas covered include defining pre-set success criteria, reporting failure taxonomies, ensuring fair baselines, and quantifying the critical sim-to-real gap using advanced small-n statistical methods.

This comprehensive guide provides best practices and an audit checklist for designing robust, real-world experiments in mobile and wireless communication systems. It emphasizes moving beyond simulations, detailing necessary RF setups, quantifiable energy metrics, and reporting statistical distributions to ensure high academic credibility.

A comprehensive guide for designing and auditing high-stakes networking experiments, particularly for top-tier academic submissions like SIGCOMM. It outlines the 'evidence ladder' from microbenchmarks to live deployment, emphasizing the need to select robust baselines, report full performance distributions (percentiles and variance), and accurately map the mechanism's operational break points.