Skill UI

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

Implements HashiCorp Vault's dynamic secrets engine to automatically generate, lease, and rotate short-lived credentials for databases (e.g., Postgres, MySQL), AWS IAM keys, and PKI certificates. This eliminates the risk associated with storing static secrets, ensuring compliance with zero-trust principles and automating the entire secret lifecycle.

A comprehensive guide detailing the systematic workflow for analyzing malicious Linux ELF binaries. It covers essential techniques including static analysis (using readelf, elftools), dynamic tracing (strace, ltrace), and deep reverse engineering (GDB) of various threats like botnets, cryptominers, and ransomware targeting Linux environments, containers, and cloud infrastructure.

CHIPSEC is an open-source framework designed to assess the low-level security configuration of x86 platform firmware and hardware. It verifies critical security controls such as SPI flash write protection, BIOS locks, SMM/SMRR configuration, and Secure Boot variable integrity. Users can run automated tests, dump SPI flash memories for forensics, and detect potential firmware implants that persist below the operating system layer.

Falco is a powerful CNCF project for real-time runtime security monitoring. This guide teaches authors how to write and deploy custom detection rules using Falco's robust YAML rule engine and modern eBPF driver. It is designed to detect critical threats such as container escapes, namespace manipulation, privileged mounts, and anomalous syscalls in Kubernetes and Docker environments, significantly hardening the overall container security posture.

This skill assists in generating robust Behavior Driven Development (BDD) tests. It supports writing feature files using Gherkin syntax (Given/When/Then) and automatically generates corresponding step definitions in multiple languages, including Java, JavaScript, and Ruby. Ideal for structuring and automating end-to-end functional tests.

KubeEye is a comprehensive cluster inspection tool designed for Kubernetes environments, particularly within KubeSphere. It systematically detects issues across workloads, nodes, and configurations by integrating multiple policy engines, including OPA/Rego, PromQL, file integrity checks, kernel parameter validation, and systemd health checks. Users can define custom inspection rules (InspectRule), schedule checks (InspectPlan), and retrieve detailed reports (InspectResult) to ensure cluster compliance and stability.

This skill provides a comprehensive, evidence-based inventory and overlap audit workflow for enterprise automation. It helps users determine which jobs, hooks, connectors, or wrappers are currently live, broken, redundant, or missing before making critical changes, ensuring reliable system architecture and clean code practices.

A comprehensive expert system simulating 15+ years of experience in global trade compliance (US, EU, UK, APAC). It specializes in HS/HTS classification, tariff optimization, sanctioned party screening (SDN), and preparing complex customs documentation to ensure legal, cost-effective, and compliant cross-border goods movement.

This tool verifies the integrity of the witness chain for Cognitum Seed IoT devices. It checks for potential provenance gaps and hash chain breaks across epochs, providing a comprehensive integrity score (0.0–1.0). Detected gaps are automatically stored in an audit trail for historical review and compliance.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.