Skill UI

This skill simulates SSL stripping and Man-in-the-Middle (MITM) attacks using specialized tools like Bettercap and sslstrip. It is designed for authorized penetration testing to assess a web application's resilience against downgrade attacks. Users can test if HSTS headers are properly enforced, if TLS certificates are correctly validated, and if sensitive data remains encrypted throughout the session.

This comprehensive guide teaches advanced iOS reverse engineering techniques using Frida dynamic instrumentation. Users can analyze proprietary app logic, extract encryption keys, trace method calls, and bypass anti-tampering or anti-debugging mechanisms without needing source code. It is essential for authorized mobile security testing and protocol analysis.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

This skill provides a comprehensive, evidence-based inventory and overlap audit workflow for enterprise automation. It helps users determine which jobs, hooks, connectors, or wrappers are currently live, broken, redundant, or missing before making critical changes, ensuring reliable system architecture and clean code practices.

This expert system is designed to act as an Arch Linux specialist, diagnosing and resolving complex system issues using best practices for rolling-release distributions. It guides users through step-by-step triage plans, leveraging native tools like pacman, systemctl, and journalctl. It provides actionable, copy-paste-ready commands for remediation, verification, and cleanup, ensuring stable system recovery.

This guide provides comprehensive best practices for creating optimized, secure, and efficient multi-stage Dockerfiles. Learn how to separate build environments (builder stage) from minimal runtime environments, significantly reducing image size and attack surface. Topics covered include layer caching optimization, security hardening (non-root users), and using minimal base images for reproducible builds.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

A comprehensive toolkit for medical device manufacturers seeking ISO 13485 certification. This skill guides users through gap analysis, creating mandatory Quality Management System (QMS) documentation, and ensuring compliance with global medical device regulations (e.g., EU MDR, FDA QMSR). It provides templates, guidance, and structured processes for foundational QMS documents like Quality Manuals and CAPA procedures.

A comprehensive runbook for rapid incident response to Figma REST API failures. It guides users through quick triage (checking status, authentication, rate limits), decision-making based on error codes (403, 429, 500), applying immediate mitigation strategies (token rotation, fallback modes), and completing thorough postmortem documentation.

This skill provides comprehensive API calls using `curl` to interact with the CAST AI platform. It allows users to list connected Kubernetes clusters, retrieve detailed cost savings reports, and inspect the inventory of managed nodes. It is essential for verifying connectivity, auditing cloud spending, and monitoring resource allocation after onboarding.

This tool provides comprehensive integration for Reolink security cameras, supporting both RTSP streaming and HTTP API access. It allows users to discover cameras via ONVIF, capture live streams, take snapshots, and even capture motion-triggered video clips. It is ideal for developers building robust, networked surveillance or monitoring systems.

A comprehensive runbook providing structured guidance for rapid incident response when encountering failures with the Canva Connect API integration. It guides users through initial triage (checking status, error rates), outlines immediate mitigation strategies for common API errors (401, 429, 5xx), and covers standardized communication templates and detailed post-incident procedures, including log collection and root cause analysis.