Skill UI

This tool provides a structured methodology for assessing the security posture of SCADA Human-Machine Interface (HMI) systems. It evaluates potential vulnerabilities in web-based HMIs, thin-client configurations, authentication mechanisms, and communication pathways between HMIs and PLCs, ensuring compliance alignment with rigorous standards like IEC 62443 and NIST SP 800-82.

This comprehensive skill provides a systematic framework for performing deep security assessments on iOS applications. It covers static analysis of IPA packages, dynamic instrumentation using Frida and Objection, SSL pinning bypass for traffic interception, extraction and auditing of sensitive data from the Keychain, and runtime method hooking. Use this for authorized penetration testing against standards like OWASP MASTG.

Assesses organizational readiness for migrating cryptographic systems to post-quantum standards (PQC), aligning with NIST guidelines. The tool performs comprehensive cryptographic inventory scanning to identify quantum-vulnerable algorithms (RSA, ECDH, ECDSA) and evaluates the feasibility of implementing hybrid TLS configurations using standards like ML-KEM and ML-DSA. Essential for implementing crypto-agility across enterprise infrastructure.

A comprehensive reference architecture guide for deploying and managing CAST AI across multiple Kubernetes clusters (Dev, Staging, Prod). It details best practices for infrastructure provisioning using Terraform, focusing heavily on cost optimization techniques such as autoscaling, spot instance management, and environment-specific resource policies. Ideal for setting up team standards and ensuring reliable, cost-effective deployments.

This skill helps users create specialized 'steering documents' or project memory for highly specific domains (e.g., API standards, testing strategies, security patterns). By analyzing the existing codebase and following predefined architectural principles, it synthesizes concise, actionable guides that capture technical patterns, best practices, and domain-specific rules, ensuring project consistency and knowledge retention.

This comprehensive checklist guides thorough security testing of OAuth 2.0 and OpenID Connect (OIDC) protocols. It covers advanced vulnerabilities such as authorization code interception, PKCE bypass, CSRF flaws, and improper scope validation. The methodology emphasizes modern industry standards like FAPI (DPoP, JAR, PAR), making it essential for penetration testers and security researchers assessing web application integrity and API security.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.

A comprehensive simulation tool designed to pressure-test medical device manufacturers' Quality System Regulation (QSR) compliance against FDA standards (21 CFR 820). It covers six critical areas: complaint handling, process validation, device history records (DHRs), CAPAs, labeling, and handling of Form 483 observations. Essential for pre-inspection readiness, internal audits, and regulatory submission planning.

This guide helps define a complete observability stack for any service. It systematically covers the Four Golden Signals (latency, traffic, errors, saturation), guiding users to define core metrics, set Service Level Objectives (SLOs), configure actionable alerting rules, and structure comprehensive monitoring dashboards. Essential for establishing robust SRE practices and documenting system health standards.

Learn how to configure and execute access recertification campaigns within Saviynt Enterprise Identity Cloud. This comprehensive process validates user entitlements, ensures strict compliance with standards like SOX, SOC2, and HIPAA, and automates the timely revocation of excessive or unused access rights.

This skill guides the comprehensive hardening of LDAP directory services. It addresses common vulnerabilities such as LDAP injection, anonymous binding, and credential harvesting. Users can enforce strong security controls, including LDAPS, channel binding, and granular access control lists (ACLs). It is essential when establishing robust identity access management (IAM) architecture or meeting stringent compliance requirements like NIST standards.