Skill UI

A robust Go library for managing complex configuration values from multiple sources. Viper resolves configuration based on a fixed precedence pipeline (flags > environment variables > config files > defaults), ensuring reliable key resolution. It supports binding flags, reading various file types (YAML, JSON, TOML), and handling hot reloads. Essential for building professional, highly configurable Go applications.

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.

This skill provides comprehensive operations for managing NodeGroup resources. It allows users to query, create, update, delete, and manage bindings for nodes, namespaces, and workspaces within the edgewize nodegroup environment. Ideal for infrastructure automation, troubleshooting, and API-driven cluster management.

A comprehensive playbook for testing security flaws in OAuth 2.0 and OpenID Connect (OIDC) implementations. Use this guide to systematically check for misconfigurations in redirect URI handling, state and nonce validation, PKCE enforcement, token audience/issuer checks, and account binding vulnerabilities. Essential for reviewing applications linked to external identity providers.

This skill provides comprehensive testing for WebSocket APIs, covering protocol basics, Cross-Site WebSocket Hijacking (CSWSH), and common security flaws. Use it when testing applications that rely on real-time communication, chat features, or persistent data streams. It validates Origin checks, session binding, and message integrity.

A comprehensive guide and tooling set for developing advanced custom visualizations in Power BI (PBIR) using Deneb. This skill guides users through authoring Vega and Vega-Lite specifications, handling complex JSON injection, data binding, and ensuring proper integration within Power BI reports. It is crucial for creating highly interactive and advanced BI dashboards.

A comprehensive reference guide covering idiomatic C++ practices, focusing on modern features from C++17 to C++23. Topics include smart pointers, move semantics, structured bindings, ranges library, concepts, and robust error handling techniques.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.

This skill guides the comprehensive hardening of LDAP directory services. It addresses common vulnerabilities such as LDAP injection, anonymous binding, and credential harvesting. Users can enforce strong security controls, including LDAPS, channel binding, and granular access control lists (ACLs). It is essential when establishing robust identity access management (IAM) architecture or meeting stringent compliance requirements like NIST standards.

A comprehensive security auditing tool designed to identify over-permissive Role-Based Access Control (RBAC) roles and potential service-account token abuse paths within a Kubernetes cluster. It systematically reviews cluster bindings, effective permissions, and common escalation primitives using advanced tools like `kubectl auth can-i`, `rbac-police`, and `rakkess`, ensuring adherence to the principle of least privilege.

This skill provides a comprehensive defense-in-depth framework for securing autonomous AI agents. It implements least-privilege tool allowlisting, identity binding, and human-in-the-loop controls to mitigate risks like prompt injection and tool poisoning. Use this when building agents that interact with sensitive systems (e.g., payments, file writes) to ensure governance, auditability, and compliance.

A comprehensive guide to production-level Laravel architectural patterns. It details best practices for structuring scalable web applications and APIs, covering service layers, dedicated actions, Eloquent ORM modeling, resource design, queue management, and advanced routing techniques like scope bindings. Learn how to maintain clean separation of concerns in large-scale PHP projects.