Skill UI

A comprehensive checklist and guide for deploying Deepgram integrations into a production environment. It covers critical areas including robust authentication practices, system resilience design (e.g., backoff strategies, circuit breakers), performance optimization (singleton clients, audio preprocessing), security measures (PII redaction), and mandatory monitoring setup (Prometheus metrics and alert rules). Essential for any go-live phase.

This skill guides the end-to-end development, deployment, and secure integration of complex AI features into Firebase applications. It covers setting up Cloud Functions, Firestore/Storage rules, Authentication, and connecting robustly with Vertex AI/Gemini for advanced AI capabilities. Focuses on building production-grade, highly secure, data-intensive AI systems.

This skill provides implementation patterns for policy guardrails when utilizing Retell AI for voice agents and phone call automation. It is designed to help ensure that AI interactions in a telephony context adhere strictly to predefined business rules and safety policies, preventing unauthorized actions or deviations from the intended conversational flow.

Vercel Engineering’s authoritative React and Next.js performance guide, offering prioritized rules for waterfalls, bundle size, data fetching, memoization, rendering, caching, and advanced patterns.

Guides writing high-quality YARA-X detection rules for malware hunting, covering naming conventions, string selection, performance tuning, migrations from legacy YARA, and reducing false positives when authoring, reviewing, or debugging signatures.

Yara Authoring helps security teams write precise YARA rules for threat detection and malware hunting by guiding string/tag management and metadata handling so signature creation keeps pace with investigations.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

This skill guides users on querying Azure Monitor activity and sign-in logs using KQL to detect sophisticated security threats. It covers identifying suspicious administrative activities, impossible travel scenarios, privilege escalation attempts, and unauthorized resource modifications. Ideal for Security Operations Center (SOC) analysts building advanced threat hunting rules or developing cloud SIEM detections.

This guide details the comprehensive process of using the Linux Audit framework (auditd) to detect advanced security threats. It covers deploying specific rules to monitor critical system files, detecting unauthorized privilege escalation, process injection, and suspicious system calls. Users can then leverage ausearch and aureport to efficiently query, reconstruct timelines, and summarize findings for forensic analysis and compliance auditing.

This skill utilizes the Microsoft Graph API to parse Office 365 Unified Audit Logs for security incident investigation. It is designed to detect critical indicators of account compromise, including the creation of suspicious email forwarding rules, unauthorized mailbox delegation changes, suspicious OAuth application consent grants, and other signs related to Business Email Compromise (BEC).

This skill guides SOC analysts and detection engineers on how to correlate complex, multi-stage attacks within the IBM QRadar SIEM platform. It covers advanced usage of AQL (Ariel Query Language) for deep event investigation, building custom correlation rules (Building Blocks and Offenses), and cross-source data correlation (e.g., auth failures with network flows). It is essential for reducing false positives and improving threat detection accuracy.

This skill details methods and SIEM rules to detect API enumeration attacks, including BOLA and IDOR. It identifies patterns such as sequential ID iteration, parameter tampering, and mixed authorization failure responses (401/403). Use this guide for threat hunting, security incident investigation, and hardening API access control monitoring.