Skill UI

This skill outlines a systematic, multi-phase workflow for diagnosing hard bugs and performance regressions in complex codebases. It emphasizes the critical necessity of building a tight, deterministic feedback loop (Phase 1) before moving to hypothesis generation. The process guides users through reproducing the failure, minimizing the scope of the issue, and forming actionable, ranked hypotheses.

This skill utilizes the Gemini Nano Banana Pro model to generate and edit high-quality images. It is ideal for users needing to create visuals, generate product mockups, design logos, or perform complex photo editing tasks based on text prompts. Supports file-based API calls for robust operation.

Programmatically manage your entire contact database within Mailtrap. This guide covers using the API to create, update, delete, and bulk import contacts. It is essential for synchronizing contact data with CRMs, triggering custom automation events, building targeted segments, or performing large-scale list cleanups.

This skill guides the systematic triage of project issues and external pull requests (PRs). It moves development items through a defined state machine using roles (e.g., bug, enhancement) and states (e.g., ready-for-agent, wontfix). The process involves context gathering, cross-codebase verification, deep questioning (grilling), and generating comprehensive, agent-ready briefs or marking them for human implementation.

This skill enables the creation and maintenance of highly structured, configurable research wikis. It manages source provenance, compiling raw source materials into organized concept pages, index maps, and derived artifacts. Ideal for systematically documenting complex knowledge bases, such as research notes, product documentation, or domain studies, ensuring full traceability and consistency.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.

This skill uses Python and boto3 to analyze AWS CloudTrail logs. It establishes statistical baselines of normal API activity and detects various anomalies, such as unusual event sources, first-time API usage, geographic IP deviations, and high-frequency calls. This is critical for identifying credential compromise, privilege escalation, and unauthorized resource access in a security incident.

Builds comprehensive identity governance and lifecycle management processes. Automates the entire employee journey (Joiner, Mover, Leaver) from the authoritative HR source of truth. This process handles role-based access provisioning, access request workflows, periodic recertification, and remediation of orphaned accounts, ensuring continuous compliance with standards like SOX and GDPR.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

A comprehensive guide for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically focusing on Microsoft Entra ID (Azure AD). This covers advanced threats like Primary Refresh Token (PRT) abuse, pass-the-cookie attacks, and Adversary-in-the-Middle (AitM) phishing. Use it for investigating anomalous sign-in behavior, configuring risk-based conditional access policies, and enforcing token protection to secure cloud identities.

This skill details the process of building and maintaining a comprehensive anti-phishing training program. It covers establishing baseline susceptibility assessments, deploying regular, progressive simulations, and providing interactive, role-based learning modules (using platforms like KnowBe4 or Proofpoint). The focus is on measuring and improving the human layer of defense against social engineering and sophisticated phishing attempts, thereby fostering a continuous security culture.