Skill UI

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

Provides programmatic access to DrugBank drug and target data, covering downloads, queries, interaction networks, targets/pathways, and chemical similarity analyses for pharmacology research and safety reviews.

This guide provides a deep, investigation-driven methodology for reviewing Django and Django REST Framework (DRF) codebases. It helps identify critical authorization gaps, focusing on Insecure Direct Object References (IDOR) and object-level access failures. Learn how to trace data flows, analyze custom managers, and verify that users can only access resources they are explicitly authorized to view or modify.

This skill provides comprehensive guidelines and automated checks for auditing and fixing HTML accessibility violations. It covers critical WCAG areas including proper ARIA labeling, full keyboard navigation support, focus management for modals and dialogs, color contrast adherence, and robust form error handling. Use it when developing any interactive UI component or reviewing existing code for accessibility compliance.

A powerful code review utility designed for SwiftUI projects. It comprehensively analyzes code quality, ensuring adherence to modern Swift APIs, optimal performance, robust data flow management, and compliance with Apple's Human Interface Guidelines and accessibility standards (like VoiceOver and Dynamic Type). Use this tool when writing, refactoring, or reviewing complex SwiftUI implementations to maintain high code hygiene and maintainability.

This script provides a comprehensive security assessment of Microsoft Entra ID (Azure AD) identity configurations. It audits for risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using PowerShell and Graph API. Ideal for compliance audits, security posture review, and post-merger security assessments.

Systematically review Kubernetes RBAC roles, bindings, and service accounts to surface overly permissive access, privilege escalation paths, and least-privilege violations using tools like rbac-tool and KubiScan.

This guide details the implementation of Microsoft Entra Privileged Identity Management (PIM), enforcing Just-in-Time (JIT) role activation, mandatory approval workflows, and periodic access reviews for critical Azure AD and resource roles. It aligns with Zero Trust principles by eliminating standing privileges.

This skill provides a comprehensive framework for conducting systematic access reviews and certifications across enterprise applications. It guides users through designing review campaigns, implementing risk-based prioritization (e.g., privileged, PII access), assigning reviewers (manager, application owner), and automating the collection of entitlement data. The process ensures compliance evidence is generated for major standards like SOX, HIPAA, and PCI DSS, helping maintain the principle of least privilege.

A comprehensive guide detailing the process of performing entitlement reviews and access certification campaigns using SailPoint IdentityIQ. This skill is critical for maintaining compliance (SOX, HIPAA) by automating manager reviews, targeted privileged access validation, and identifying Separation of Duties (SOD) violations. It ensures robust access governance and facilitates automated remediation workflows.

This guide details the systematic process for reviewing high-privilege accounts, including Domain Admins, cloud IAM roles, and service accounts. It is a critical identity governance function designed to validate that users only retain the access they absolutely require, thereby enforcing the principle of least privilege. This review is mandatory for compliance frameworks like SOC 2, PCI DSS, and HIPAA, and involves discovery, validation, remediation, and continuous monitoring.

A comprehensive skill for auditing service accounts across complex enterprise environments, including Active Directory, major cloud platforms (AWS, Azure, GCP), and databases. It identifies risks such as orphaned accounts, over-privileged access, and non-compliant credentials, ensuring adherence to industry standards like SOX, PCI DSS, and HIPAA. Used during security assessments and compliance reviews.