Skill UI

This comprehensive skill guides the deployment and configuration of Wazuh SIEM/XDR for robust endpoint monitoring. Users will learn to manage agents via the API, create custom decoders and rules (XML), query security alerts, and test rule logic, enabling organizations to establish strong security controls and automate incident response.

This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for robust policy-as-code enforcement. Learn to write complex Rego policies, deploy OPA Gatekeeper as a Kubernetes admission controller, and integrate policy evaluation into CI/CD pipelines to enforce security and compliance across clusters.

Learn how to implement Runtime Application Self-Protection (RASP) agents for Java and Python web applications. This skill covers deploying OpenRASP, detecting OWASP Top 10 attacks (SQLi, XSS, RCE), configuring security policies, and integrating real-time security alerts with SIEM platforms for comprehensive defense in depth.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.

This skill covers performing comprehensive vulnerability assessments across diverse environments, including on-premises infrastructure, cloud VMs, and container registries. It leverages standard network protocols like SSH (Linux) and WMI (Windows), coupled with advanced cloud provider APIs for analyzing disk snapshots without requiring local endpoint agents. Ideal for security auditing and compliance checks.

Utilizes ScoutSuite, an open-source multi-cloud auditing tool, to perform comprehensive, agentless security posture assessments across AWS accounts. It queries various AWS APIs to enumerate all resources, identify misconfigurations (such as publicly exposed S3 buckets or weak IAM policies), and generate detailed, actionable HTML reports for compliance and security auditing.

Automates complex red team operations using the Covenant C2 framework. This guide covers the entire lifecycle of authorized adversary simulation, including configuring HTTP/HTTPS listeners, deploying agents (grunts), executing tasks remotely, and tracking lateral movement. It is essential for performing comprehensive penetration testing and security auditing.

Connects to the MAXIA AI-to-AI marketplace on the Solana blockchain. This tool allows users to discover, buy, and sell AI services directly between decentralized agents. Features include comprehensive crypto intelligence, such as sentiment analysis and trending data; DeFi yield tracking; Web3 wallet security analysis (e.g., rug detection); and real-time GPU pricing, making it a comprehensive hub for Web3 AI interactions.

Comprehensive Snowflake development assistant covering SQL best practices, dynamic tables, streams, tasks, Snowpipe, Cortex AI functions/agents, Snowpark Python, dbt integration, performance tuning, and security hardening for production data platforms.

This framework implements robust input and output validation guardrails for LLM-powered applications. It prevents prompt injection, detects and redacts PII, filters toxic content, and validates model outputs against defined schemas. Use it when deploying AI agents that handle sensitive data or require strict adherence to corporate policies, ensuring a secure and trustworthy AI interaction layer.

The Safety Guard skill is designed to prevent destructive actions when working in production systems or when autonomous agents are executing tasks. It offers three protection modes (Careful, Freeze, and Guard) to monitor dangerous commands, lock specific directories, and ensure code changes are confined to intended areas, enhancing system stability and security.

Assesses AI/ML systems for prompt injection, jailbreak, model inversion, data poisoning, and agent tool abuse using MITRE ATLAS mapping, signature detection, and scoring metrics before deployment.