Skill UI

A comprehensive guide for web security professionals detailing advanced techniques to bypass Content-Security-Policy (CSP) headers. It covers exploiting weaknesses such as unsafe-inline/unsafe-eval, JSONP endpoints, base-uri, and nonce/hash gaps. Used during penetration testing or bug bounty hunting to achieve Cross-Site Scripting (XSS) or data exfiltration even when CSP is implemented.

This skill covers the technical process of setting up SSL/TLS inspection (decryption) on next-generation firewalls and proxies. It details how to act as a trusted Man-in-the-Middle to intercept, decrypt, and inspect encrypted HTTPS traffic for malicious payloads, data exfiltration, and policy violations. The workflow includes generating internal Certificate Authority (CA) certificates and deploying them across various operating systems (Windows, macOS, Linux) to ensure visibility into the web's encrypted blind spot.

Provides end-to-end guidance for fine-tuning and serving Physical Intelligence’s OpenPI pi0 family (pi0, pi0-fast, pi0.5) with both JAX and PyTorch backends, covering dataset prep, norm stats, checkpoint conversion, and low-latency WebSocket policy inference for ALOHA, DROID, and LIBERO tasks.

A comprehensive guide for implementing Data Loss Prevention (DLP) policies across the Microsoft 365 ecosystem using Microsoft Purview. It details how to protect PII, PHI, and PCI data across Exchange Online, SharePoint, OneDrive, and endpoints. Key features include configuring custom sensitivity labels, regex-based sensitive information types, and endpoint DLP rules via PowerShell, ensuring robust compliance and data governance.

This comprehensive skill provides multi-layered guardrails for integrating with LLMs like Claude. It enforces security and compliance by implementing input validation (PII detection, length checks), system prompt restriction (scope control, safety rules), output filtering (preventing sensitive data leakage), cost governance, and model access policies. Ideal for building secure, robust, and governed AI applications.

Provides comprehensive guidelines for securing CoreWeave cloud deployments on Kubernetes. Covers critical security areas including credential management, implementing Role-Based Access Control (RBAC), enforcing network isolation policies, and handling sensitive secrets for ML model access. Essential for hardening GPU workloads and protecting data in cloud environments.

This skill guides users through optimizing corporate travel spending using the Navan platform. It covers analyzing historical booking data via REST API, configuring granular travel policies (flight/hotel caps), enforcing negotiated rates, tracking unused travel credits, and utilizing the Rewards program to maximize savings and ensure compliance for corporate expense management.

This comprehensive playbook provides an end-to-end guide for migrating from legacy Travel Management Systems (like SAP Concur or other TMCs) to Navan. It covers critical phases including data inventory, user provisioning (via SCIM/API), manual policy recreation, parallel system running, and the final cutover checklist. Use this guide for planning and executing complex travel system migrations.

A comprehensive framework for establishing governance standards across Notion integrations. It enforces naming conventions for bots, manages page sharing policies to prevent data leaks, validates database schemas (e.g., required property naming, date formats), and provides access audit scripts. Ideal for maintaining consistency and security in large, multi-team Notion environments.

This skill scans live websites or local codebases to detect all data collection signals, including cookies, analytics, forms, and third-party processors. It then generates a comprehensive, 12-section privacy policy tailored for GDPR and CCPA compliance. The system maps detected data touchpoints to specific legal bases (Consent, Contract, etc.), ensuring the resulting policy accurately reflects the actual data practices of your application or website.

This skill provides comprehensive guidance on implementing robust data governance and security guardrails within Snowflake. It covers advanced features such as network rules, mandatory authentication policies (MFA, Key Pair), session timeouts, and statement-level controls. Use this when enforcing strict security policies, achieving regulatory compliance, or structuring robust data access controls for a Snowflake environment.

An expert playbook detailing DNS rebinding techniques to bypass the Same-Origin Policy (SOP). This method is used in penetration testing to exploit client-side applications that rely on DNS resolution for origin checks, allowing attackers to trick the browser into sending requests to internal, non-publicly accessible services (like cloud metadata endpoints) while maintaining a seemingly trusted origin.