Skill UI

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

This skill provides a comprehensive suite for executing load testing, stress testing, and performance benchmarking. Use it to simulate peak traffic, identify system bottlenecks, and verify compliance with Service Level Agreements (SLAs). It supports industry-standard tools like k6, Artillery, Locust, and JMeter for robust performance analysis.

This guide provides comprehensive methods for load testing and capacity planning of Vercel serverless deployments. Learn how to use professional tools like k6 and autocannon to simulate realistic traffic spikes, measure latency (P95, P99), analyze cold start impact, and tune concurrency settings (Fluid Compute) to ensure optimal application performance and scalability under heavy load.

This skill manages the integration of Model Context Protocol (MCP) servers with Windsurf, significantly extending its operational capabilities. It enables Windsurf to interact with external resources, including databases, file systems, APIs, and custom tools through a standardized protocol. Use this when configuring or utilizing advanced, external tool integrations within the Windsurf environment.

A powerful tool for architecting production-grade multi-agent workflows. It allows users to define complex, multi-step AI pipelines using structured patterns (sequential, parallel, hierarchical). Key features include defining explicit handoff contracts, implementing robust failure handling, and managing context/cost discipline across long-running processes, ensuring reliable and scalable AI system deployment.

This comprehensive guide details advanced forensic techniques for detecting and analyzing sophisticated malware that operates at the system's deepest levels, such as the Master Boot Record (MBR), Volume Boot Record (VBR), and UEFI firmware. It covers boot sector disassembly, UEFI module inspection, and memory forensics (SSDT/DKOM). Use this when standard security tools fail or when investigating nation-state level compromises.

This guide details the process of performing static analysis on potentially malicious PDF documents. It utilizes advanced tools like peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects. Use this method when triaging suspicious attachments from phishing emails or conducting deep forensic examination of weaponized document artifacts to generate actionable Indicators of Compromise (IOCs).

This guide details advanced digital forensics techniques for recovering deleted file metadata and content from NTFS volumes. It focuses on analyzing the Master File Table (MFT), USN Journals, and $LogFile transaction records. Techniques include parsing MFT slack space and utilizing specialized tools like MFTECmd to reconstruct file system timelines and identify deleted evidence remnants.

A comprehensive guide for deep packet inspection and network forensics using Wireshark and tshark. This skill is critical for incident response, where it allows users to capture, filter, and analyze network packet data to identify malicious command-and-control traffic, diagnose complex protocol issues, extract indicators of compromise (IOCs), and reconstruct data exfiltration paths. Use it for validating security rules and understanding network anomalies.

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

This tool assists in defining a structured Security Operations Center (SOC) escalation matrix. It maps incident response procedures based on severity (P1-P4), asset criticality, and business impact. Users can model tiered response paths, set Service Level Agreements (SLAs), and implement context-driven automatic escalation triggers to ensure rapid and consistent handling of cybersecurity incidents.

This tool provides a comprehensive security audit framework for Azure Storage accounts. It systematically detects critical misconfigurations, such as publicly accessible blob containers, weak encryption settings, overly permissive network access rules, and missing logging. Use it when performing compliance checks, responding to security incidents, or establishing storage security baselines in Azure environments.