Skill UI

This guide provides a comprehensive blueprint for deploying the Abridge clinical AI integration to highly secure, HIPAA-compliant cloud infrastructure. It covers best practices for healthcare deployments, including utilizing BAA-covered services (GCP Cloud Run), robust secret management via GCP Secret Manager, and implementing VPC-restricted networking for maximum data security.

A comprehensive provider for integrating Eufy security cameras (supporting local P2P or cloud connectivity). This tool facilitates stable RTSP streaming for live monitoring and efficiently captures event-triggered video clips. It is designed for advanced systems that require continuous video feeds and reliable event-based data input for AI analysis and monitoring solutions.

A comprehensive, multi-phase checklist for deploying and validating CAST AI cost optimization and autoscaling features on a production Kubernetes cluster. It guides users through prerequisites, initial monitoring setup (Phase 1), full autoscaling enablement (Phase 2), security hardening (RBAC, secrets), and critical validation commands for safe go-live deployment.

This skill performs comprehensive, systematic cleanup across 11 critical dimensions of code quality, including dead code removal, security vulnerability checks, weak type elimination, and performance optimization. It analyzes code, assigns confidence scores, and verifies all suggested changes using build and test gates. Ideal for projects suffering from accumulated technical debt, or before major release cycles to ensure robust, maintainable code.

This skill helps users create specialized 'steering documents' or project memory for highly specific domains (e.g., API standards, testing strategies, security patterns). By analyzing the existing codebase and following predefined architectural principles, it synthesizes concise, actionable guides that capture technical patterns, best practices, and domain-specific rules, ensuring project consistency and knowledge retention.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This advanced skill explores offensive reconnaissance techniques focused on defeating modern operating system security boundaries and mitigations. Topics include kernel/user boundary manipulation, sandbox escapes (AppContainer, LPAC), COM/RPC boundary exploitation, hypervisor interactions, and various integrity level bypassing methods. It is essential for planning advanced privilege escalation paths and understanding deep Windows security architecture, including AMSI, WDAC, and ETW manipulation.

This skill guides users through building comprehensive Smart City and IoT solutions on the Azure platform. It covers the entire solution lifecycle, from initial high-level requirements and defining city domains (e.g., traffic, energy) to designing robust, scalable architectures. Outputs include detailed reference architectures, security checklists, cost strategies, and phased implementation roadmaps for enterprise deployment.

A comprehensive playbook detailing identification and bypass techniques for major binary protections, including ASLR, PIE, NX/DEP, RELRO, and stack canaries. This guide is essential for understanding how to exploit modern, difficult-to-break systems in advanced security research and CTF competitions.

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.

This expert playbook details advanced attack vectors specific to the HTTP/2 protocol. It covers sophisticated techniques such as h2c smuggling, exploiting pseudo-header discrepancies, HPACK compression vulnerabilities, and abusing stream multiplexing. Use this skill for professional penetration testing and security auditing of H2 services, especially for bypassing proxy-level controls and WAFs.