Skill UI

Conducts passive OSINT reconnaissance to map an organization’s external attack surface, harvesting DNS, certificate, cloud, personnel, and leak intelligence before active penetration testing or red team work.

Use Falco YAML rules and the Falco gRPC API to monitor syscalls and runtime behavior in containers or Kubernetes, catching shell spawns, file tampering, network anomalies, and privilege escalation while parsing alerts to support incident response and security testing.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

Guides authorized AWS penetration testing with Pacu, covering IAM enumeration, privilege escalation scanning, data access checks, and detection validation for cloud red-team and compliance exercises.

Use GCPBucketBrute alongside gcloud IAM inspection to enumerate storage buckets, evaluate IAM bindings, and hunt privilege escalation paths during GCP security assessments.

Performs comprehensive IoT device security assessments, combining hardware interface testing, firmware extraction, runtime exploitation, and network/cloud/mobile analysis to find vulnerabilities before deployment or for product reviews.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

This skill provides a comprehensive guide on securely integrating and calling Firebase Cloud Functions from Flutter applications. It covers the proper use of `httpsCallable` to invoke structured server-side logic, handling data serialization, implementing robust error handling (including permission denial and timeouts), configuring regional deployments, and utilizing the Firebase Emulator Suite for reliable local testing.

Enables structured cloud penetration testing across Azure, AWS, and GCP by guiding reconnaissance, authentication, enumeration, exploitation, and persistence workflows for authorized assessments.

A comprehensive guide and set of tools for programmatically building, scaffolding, and deploying Power Automate cloud flows using the FlowStudio MCP server. It guides agents through the entire workflow, including checking for existing flows, resolving connection references, defining actions, and final deployment/testing, all without needing to open the portal.

This utility provides a structured way to manage and separate notes across multiple accounts and environments within Apple Notes. By utilizing distinct accounts (e.g., iCloud for Production, 'On My Mac' for Development), users can ensure absolute data isolation between development, staging, and live production data. It is crucial for maintaining clean separation in complex development workflows and QA testing scenarios.

Automates comprehensive regression testing for all enabled cloud Large Language Model (LLM) providers. This includes verifying core connectivity, standard chat completion, structured JSON output, and Server-Sent Events (SSE) streaming capabilities. Essential for ensuring the reliability and stability of multi-cloud AI integrations in a CI/CD pipeline.