Skill UI

This skill performs a proactive, comprehensive audit to quantify the business and regulatory impact of a potential data breach before it occurs. It inventories sensitive data (PII, PHI, PCI-DSS), traces complex data flows through the codebase, identifies all exposure vectors, and calculates the 'blast radius.' The output provides law-sourced figures (e.g., GDPR, CCPA, HIPAA fine maximums) alongside heuristic risk estimates, guiding proactive hardening roadmaps for compliance and security.

This skill guides the safe execution of chaos engineering experiments to surface weaknesses in production systems without causing actual outages. It provides tools to design robust experiments by defining hypotheses, calculating the potential 'blast radius' before failure injection, setting strict abort criteria, and generating structured postmortems. Ideal for SRE teams running game days and resilience tests.

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

This skill simulates high-impact container breakout techniques, demonstrating how to achieve root compromise on the underlying host operating system. It covers exploiting misconfigurations (e.g., privileged pods, hostPath mounts, exposed Docker sockets) and leveraging known vulnerabilities in runC/containerd, making it essential for authorized penetration testing and assessing the blast radius of a compromised microservice.

Pacu is an open-source, modular AWS exploitation framework designed for authorized cloud penetration testing and red-teaming. It functions as a cloud-pentest analogue to Metasploit, enabling users to enumerate AWS resources, scan for privilege escalation paths, and automate the exploitation of IAM vulnerabilities, persistence mechanisms, and data exfiltration. Use this skill to assess the blast radius of compromised credentials in a controlled, authorized environment.

This skill guides users through the complete lifecycle of data quality incident management using Monte Carlo MCP tools. It performs detailed investigation, including root cause analysis and blast radius assessment. It then coordinates various external tools (APIs, CLI) to propose and execute appropriate remediation actions, ensuring all data incidents are resolved with full context.

This skill guides the safe, systematic, and at-scale refactoring of existing Go codebases. It ensures that structural changes maintain observable behavior by following a rigorous process: mapping blast radius, strengthening safety nets (tests), applying small tool-driven transforms, and committing changes atomically via staged PRs. Ideal for cleaning up large functions, resolving code smells, renaming packages, or tackling complex architectural improvements in Go.