Skill UI

This skill covers the comprehensive automation of X.509 certificate lifecycle management, including requesting, issuing, deploying, monitoring, renewing, and revoking certificates. Utilizing Python and the ACME protocol (like Let's Encrypt), it helps organizations mitigate security risks and prevent service outages caused by expired or poorly managed certificates. Ideal for security auditing, incident response, and continuous security testing.

This skill provides a comprehensive method for assessing SSL/TLS server configurations using the powerful Python library, sslyze. It evaluates crucial security aspects including supported protocol versions (e.g., TLS 1.2, 1.3), cipher suite strength, certificate chain validity, HSTS enforcement, and checks for common vulnerabilities like Heartbleed and ROBOT. Ideal for penetration testing, security auditing, and incident response.

Simulates and detects software supply chain attacks by checking typosquatting risks with Levenshtein distance, probing dependency confusion across registries, verifying package hashes, and running pip-audit vulnerability scans for security assessments.

This guide details a comprehensive methodology for penetration testing desktop (thick client) applications. It covers static and dynamic analysis, focusing on identifying vulnerabilities such as hardcoded credentials, insecure local storage, DLL hijacking, memory manipulation, and API communication flaws. Tools like dnSpy, Procmon, and Burp Suite are utilized for in-depth security auditing of enterprise and banking software.

Guides capturing WPA/WPA2 handshakes with monitor-mode adapters, then using aircrack-ng, hashcat, and curated dictionaries to assess passphrase strength during authorized wireless security assessments and document the findings and cleanup.

Provides step-by-step procedures to detect and remediate misconfigured Amazon S3 buckets, including enabling public access blocks, auditing policies and ACLs, enforcing encryption, and automating fixes with AWS Config and Lambda for compliance or incident response scenarios.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

This guide details how to test web applications and APIs that send emails for Email Header Injection vulnerabilities. It covers techniques like CRLF injection to manipulate email headers (e.g., adding unauthorized CC/BCC fields, modifying the sender 'From' address, or overriding the content type). Use cases include auditing contact forms, password reset features, and general email endpoints to prevent spam relay, spoofing, and data interception.

Orchestrates WCAG 2.2 Level A/AA scans, fixes, and verifications across React, Next.js, Vue, Angular, Svelte, and plain HTML codebases, producing before/after diffs, contrast checks, compliance reports, and CI/CD-ready hooks.

Delivers MiCA compliance evidence plus stablecoin risk scoring using FeedOracle’s MCP tools, ideal for audit or regulatory queries needing signed, verifiable data and pegged-asset insights.

Generates monthly progress summaries for GEO agency clients by comparing baseline and current audits, highlighting score gains, crawler access, and action-item status to prove value in retention discussions.

Auto-generate professional GEO service proposals from audit data, translating findings into business risks, tiered recommendations, pricing, timeline, and PDF-ready documentation for prospect follow-up.