Skill UI

This skill provides comprehensive guidance on implementing high-performance, non-blocking applications in Python. It utilizes asyncio, async/await, and advanced concurrency patterns to handle I/O-bound workloads efficiently. Ideal for building async web APIs, real-time systems, and concurrent data processing.

Provides comprehensive strategies to optimize Langfuse tracing overhead for high-throughput applications. This guide covers benchmarking, tuning batch processing configurations, implementing non-blocking wrappers, and optimizing payload sizes. Use this when scaling Langfuse for production workloads to minimize latency and maximize stability.

A comprehensive guide for creating forensically sound, bit-for-bit disk images of suspect drives using standard tools like dd and specialized forensic tools like dcfldd. It emphasizes best practices including hardware write-blocking, pre-acquisition hashing, and post-acquisition integrity verification to maintain the chain of custody for legal evidence.

This skill analyzes Indicators of Compromise (IOCs)—such as IP addresses, domains, and file hashes—by querying multiple threat intelligence platforms (VirusTotal, AbuseIPDB, MISP). It determines maliciousness confidence, assigns blocking priorities, and attributes threats to campaigns, crucial for incident response, threat triage, and making informed security decisions.

This solution guides the implementation of a phishing reporting button within email clients, creating a critical feedback loop for security teams. By integrating with SOAR platforms, reported suspicious emails undergo automated triage, including IOC extraction, sandbox analysis, and threat intelligence checks. The workflow enables rapid classification, automated remediation (e.g., mass retraction, sender blocking), and provides detailed feedback to the user reporter, significantly enhancing overall security posture.

This skill provides comprehensive guidance on deploying and tuning Web Application Firewall (WAF) rules across major cloud platforms, including AWS, Azure, and Cloudflare. It details strategies to protect cloud-hosted applications against OWASP Top 10 attacks, implement rate limiting for brute force protection, configure geo-blocking, and refine rules to minimize false positives.

Suricata is a high-performance, open-source network threat detection engine used for deep packet inspection. This skill details the deployment and configuration of Suricata in Intrusion Prevention System (IPS) mode. It covers setting up custom rules, integrating third-party rulesets (like Emerging Threats), and actively blocking malicious traffic in real time, making it essential for robust network security and compliance enforcement.

OPA Gatekeeper is a powerful Kubernetes admission controller that enforces policies using Rego rules. It utilizes ConstraintTemplates and Constraints to validate, mutate, or deny API requests at the cluster admission stage. This tool is essential for implementing policy-as-code practices, ensuring that Kubernetes deployments adhere to organizational security standards, compliance requirements, and best practices, such as mandating labels or blocking privileged containers.

This guide details how to implement sophisticated Security Orchestration, Automation, and Response (SOAR) playbooks using Palo Alto Cortex XSOAR. It demonstrates full lifecycle automation, such as phishing incident investigation, requiring enrichment of URLs, IPs, and files, followed by automated containment actions (e.g., blocking senders, purging mailboxes). Mastering this allows SOC teams to drastically reduce Mean Time To Respond (MTTR) by automating detection, analysis, and remediation steps across multiple security tools.

A governance skill designed to secure AI agent tool calls using advanced authorization policies. It implements Cedar policies to control which tools agents can access and under what conditions. Key features include running in 'Shadow mode' for safe observation, 'Enforce mode' for strict blocking, and generating cryptographically signed Ed25519 receipts to provide an immutable, tamper-evident audit trail for every policy decision.

Implements automated, multi-layered policy enforcement and guardrails for Adobe integrations. This skill provides crucial security checks, including detecting sensitive credentials (e.g., p8_ secrets), pre-screening content for services like Firefly (blocking trademarks or explicit material), and enforcing usage quotas for PDF Services. It is essential for maintaining secure and compliant CI/CD pipelines.

Comprehensive toolkit for managing sensitive Flexport supply chain data, including shipment records, customs declarations, and financial invoices. This skill enforces strict data governance, handling PII redaction, ensuring GDPR/CCPA compliance, managing mandated data retention periods (e.g., 5-7 years), and blocking restricted export items (ITAR) to maintain global trade compliance standards.