Skill UI

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

A comprehensive runbook for rapid incident response concerning Ideogram API outages, authentication failures, and performance degradation. It provides detailed triage scripts, decision flows based on HTTP status codes (401, 429, 5xx), immediate mitigation actions (e.g., enabling fallback mode), and structured templates for communication and postmortems.

A comprehensive guide and set of scripts to systematically audit AWS S3 buckets for security misconfigurations. This tool identifies publicly exposed data, overly permissive ACLs, inadequate bucket policies, and missing encryption settings, ensuring adherence to least-privilege principles and compliance frameworks like SOC 2 or HIPAA.

This guide provides comprehensive techniques for detecting Layer 2 ARP poisoning and spoofing attacks. It covers monitoring gratuitous ARP floods, tracking IP-to-MAC mapping changes, and identifying rogue devices. Techniques include deploying ARPWatch, configuring Dynamic ARP Inspection (DAI) on managed switches, and using advanced Wireshark filters or custom Python scripts for robust security monitoring and incident response.

This comprehensive guide details the end-to-end deployment of Delinea Secret Server for robust Privileged Access Management (PAM). It provides scripts and steps for configuring the vault infrastructure, defining secret templates, and automating the discovery of privileged credentials across hybrid environments. Essential for organizations needing centralized, compliant, and automatically rotated management of shared and service accounts.

Zeek is a powerful, open-source network analysis framework that functions as a passive security monitor. It generates highly detailed, structured logs (e.g., HTTP, DNS, TLS) from raw network traffic, allowing for deep metadata extraction. This skill guides users through deploying Zeek, writing custom detection scripts, and integrating the resulting rich security logs with SIEM platforms for advanced threat detection and forensic investigations.

A comprehensive guide for systematically assessing web applications and APIs for broken access control vulnerabilities (OWASP A01:2021). The methodology covers role-based access control (RBAC) auditing, horizontal and vertical privilege escalation, and multi-tenant data leakage using tools like Burp Suite, ffuf, and custom scripts. Essential for authorized penetration testing and security audits.

This assistant provides comprehensive performance profiling for complex computing systems. It analyzes various targets, including Python scripts, running processes, GPU utilization, and memory bottlenecks. Utilizing both external tools (like nvidia-smi, cProfile) and advanced code instrumentation, it measures CPU, memory, and interconnect performance, generating a structured report with actionable insights and a mandatory changelog of all modifications.

This skill analyzes accumulated usage logs from a complex research harness (ARIS) to propose structural optimizations. It identifies areas for improvement in SKILL scripts, default parameters, workflow ordering, and reviewer prompts. It is designed to automate the meta-level engineering process, ensuring that system efficiency is continuously improved based on real-world usage data.

A comprehensive guide and toolset for load testing HubSpot integrations and planning for high-volume traffic. This resource details HubSpot's specific API rate limits (per-second and daily) and provides k6 scripts and capacity calculators to ensure your application scales reliably before deployment in production.

This guide provides a comprehensive framework for positioning mobile and embedded systems manuscripts for ACM MobiSys. It details venue fit, contribution framing, necessary real-device evidence, and how to differentiate the work from related conferences (e.g., MobiCom, UbiComp). Use this when your research value depends on surviving real-world device constraints, sensing, or edge computing environments.

A comprehensive guide for positioning research manuscripts for the ACM SIGGRAPH I3D Symposium. It covers core topics like real-time rendering, interactive 3D systems, and GPU algorithms, advising authors on how to frame their work, structure evidence, and compare it against related academic venues to maximize submission success.