Skill UI

This integration facilitates the secure deployment of Alchemy-powered decentralized applications (dApps) across major cloud platforms like Vercel and Google Cloud Run. It is designed to ensure that sensitive Alchemy API keys are treated as server-side secrets, preventing client-side exposure. Use this when setting up backend services, RPC proxies, or deploying production-grade Web3 applications requiring secure access to blockchain data.

This skill performs a proactive, comprehensive audit to quantify the business and regulatory impact of a potential data breach before it occurs. It inventories sensitive data (PII, PHI, PCI-DSS), traces complex data flows through the codebase, identifies all exposure vectors, and calculates the 'blast radius.' The output provides law-sourced figures (e.g., GDPR, CCPA, HIPAA fine maximums) alongside heuristic risk estimates, guiding proactive hardening roadmaps for compliance and security.

This skill guides the detection and recovery of exposed version-control system (VCS) metadata, including paths for Git, SVN, and Mercurial, as well as common backup and configuration files. It is essential for authorized penetration testing when assessing an application's security posture against information leaks. Techniques include probing specific directories (e.g., /.git/HEAD) and analyzing status codes (e.g., 403 vs 404) to confirm exposure.

This skill analyzes how artificial intelligence (AI) is disrupting an industry or specific business unit. It assesses competitive exposure across 10 critical vectors (e.g., labor substitution, data moat, customer interface) and generates a detailed 90-day defensive counterstrike plan. Ideal for due diligence, strategic planning, and anticipating market shifts in AI-driven ecosystems.

This skill provides comprehensive security auditing for Model Context Protocol (MCP) servers and their associated tool metadata. It is designed to detect sophisticated supply chain attacks, including tool poisoning (indirect prompt injection), Server-Side Request Forgery (SSRF), tool shadowing, and unauthenticated exposure. It is essential for securing AI agent stacks before integrating new tools or during CI/CD processes.

This skill provides methods and frameworks to detect sophisticated AI attacks, including model stealing, membership inference, and model inversion. It focuses on monitoring query patterns, analyzing confidence exposure, and implementing defensive controls on inference APIs to protect intellectual property and data privacy.