Skill UI

PyOpenMS provides Python bindings for OpenMS to drive complete mass spectrometry workflows, covering data IO, spectral processing, feature/peptide-protein identification, quantitation, and metabolomics pipelines.

Pysam offers Python bindings to htslib for reading and writing SAM/BAM/CRAM alignments, VCF/BCF variants, and FASTA/FASTQ sequences, enabling coverage stats, pileup analysis, variant queries, and seamless integration into NGS pipelines.

Query BindingDB for measured drug-target affinities (Ki, Kd, IC50, EC50) via REST endpoints or downloaded TSVs to support target-centric drug discovery, SAR analysis, lead profiling, and benchmarking datasets.

Query the JASPAR REST API and Python helpers to retrieve TF binding profiles, convert PFMs to PWMs, and scan DNA sequences for high-confidence motifs, enabling regulatory variant interpretation, ChIP/ATAC analysis, and TF network construction.

Generate and debug server-side QWeb XML for Odoo PDF reports, emails, and website pages, with correct directives, translations, and report action bindings.

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

Systematically review Kubernetes RBAC roles, bindings, and service accounts to surface overly permissive access, privilege escalation paths, and least-privilege violations using tools like rbac-tool and KubiScan.

This comprehensive guide details how to implement robust security hardening measures for LDAP directory services. It specifically addresses critical vulnerabilities like LDAP injection, anonymous binding, and channel binding bypass. Key features include mandatory LDAPS enforcement, granular access control list configuration, and integrating advanced monitoring to ensure the infrastructure meets high compliance standards (e.g., NIST 800-53). Essential for security architects and operations teams.

This guide details how to detect WMI event subscription persistence, a common attacker technique (T1546.003). It focuses on analyzing suspicious Sysmon Event IDs 19, 20, and 21 to identify malicious EventFilters, EventConsumers, and Bindings. Essential for incident response and threat hunting in Windows environments.

This guide details advanced threat hunting techniques to proactively uncover adversary persistence mechanisms leveraging Windows Management Instrumentation (WMI) event subscriptions. It monitors the creation and binding of WMI events (Filter, Consumer, Binding) to detect malicious, fileless backdoors used by sophisticated threat actors, especially when standard persistence locations are clean.

Implement Kubernetes RBAC to enforce least-privilege access across namespaces, covering Role/ClusterRole design, binding configuration, service account hardening, OIDC integration, and audit logging for multi-tenant clusters.