Skill UI

This guide provides a comprehensive methodology for assessing the security posture of Kubernetes etcd clusters. It covers critical areas including encryption at rest (for secrets), TLS transport security, access control validation, secure backup procedures, and network isolation checks, ensuring cluster data integrity and confidentiality.

Open Source Intelligence (OSINT) is the critical first phase of red team engagements. This guide details how to systematically collect publicly available data about a target organization. It covers mapping network assets (domains, IPs), identifying personnel for social engineering, discovering credential leaks, and mapping the entire technology stack. Use this skill during authorized security assessments to build comprehensive attack surface maps and initial access strategies.

This skill provides comprehensive capability to discover and inventory all privileged accounts across an enterprise infrastructure. It covers domain admins, local admins, service accounts, database roles, and cloud IAM roles. It is essential for security assessments, incident response, and compliance auditing, helping to establish a complete baseline for Privileged Access Management (PAM).

A comprehensive skill for auditing service accounts across complex enterprise environments, including Active Directory, major cloud platforms (AWS, Azure, GCP), and databases. It identifies risks such as orphaned accounts, over-privileged access, and non-compliant credentials, ensuring adherence to industry standards like SOX, PCI DSS, and HIPAA. Used during security assessments and compliance reviews.

This skill provides comprehensive procedures for identifying and remediating Amazon S3 bucket misconfigurations. It covers enabling Block Public Access settings, auditing policies and ACLs, enforcing default encryption (KMS/AES), and utilizing AWS Config/Lambda for automated remediation. It is essential for maintaining data compliance and responding to security incidents.

This skill provides comprehensive guidance on hardening and securing critical process historian servers (e.g., OSIsoft PI, Honeywell PHD) operating within Operational Technology (OT) environments. It covers best practices for network placement across the Purdue Model, implementing robust access controls, establishing secure data replication architectures through DMZs (using data diodes), preventing SQL injection, and maintaining data integrity for safety-critical and regulatory reporting purposes. It is essential for minimizing cyber risks in industrial control systems.

This skill provides institutional-depth equity analysis by combining public SEC EDGAR filings and real-time market data. It can generate structured, verdict-style memos, score stocks across four key pillars (Momentum, Stability, Financial Health, Upside), and perform side-by-side comparisons of two tickers, enabling data-driven investment decision support without requiring proprietary terminal access.

Use Clarvia AEO (Agent Experience Optimization) to score any MCP server, API, or CLI tool for agent-readiness. It evaluates 15,400+ AI tools across four dimensions—API accessibility, data structuring, agent compatibility, and trust signals—ensuring the components are robust enough for advanced AI agent workflows and dynamic selection processes.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

A comprehensive tool and API wrapper for accessing, parsing, and analyzing research papers published on Hugging Face and arXiv. Users can input various URLs or IDs (e.g., arXiv ID) to retrieve structured metadata, full markdown content, and automatically link associated resources such as models, datasets, and application spaces. Ideal for researchers and developers needing structured access to cutting-edge AI knowledge.

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

This tool automates the end-to-end workflow for GDPR Data Subject Access Requests (DSAR). It handles identity verification, discovers PII across structured and unstructured data sources using NER and regex, maps data to Article 15 requirements, and generates auditable compliance reports, ensuring adherence to ICO/EDPB guidelines and scaling compliance efforts.