Skill UI

This skill provides a comprehensive guide to implementing microsegmentation policies. It details how to move beyond traditional network boundaries (VLANs) to enforce least-privilege access control between individual workloads using identity and application context. Essential for preventing lateral movement and establishing a robust zero-trust architecture aligned with industry compliance standards.

A comprehensive guide on deploying Cloudflare Access and Tunnel to establish a Zero Trust Network Access (ZTNA) solution. This method replaces traditional VPNs by securely exposing self-hosted internal applications (web, SSH, RDP) without opening inbound ports. It integrates identity-aware policies, device posture checks, and robust identity providers (Okta, Azure AD) for highly secure, least-privilege access.

This skill analyzes AWS IAM policies using boto3 and Cloudsplaining principles to detect potential privilege escalation paths in AWS accounts. It identifies overly permissive policies, dangerous permission combinations (such as combining role passing and resource creation), and violations of least-privilege principles. It is designed for security incident investigation, threat hunting, and validating overall cloud security posture.

This guide details the end-to-end process for executing authorized phishing simulations. It instructs security teams and red teams on designing realistic social engineering pretexts, setting up credential harvesting infrastructure (using tools like GoPhish), and measuring key metrics such as open rates, click-through rates, and credential submission rates. It is crucial for assessing organizational human security awareness and testing email security controls (e.g., DMARC, SPF, DKIM).

This guide provides comprehensive steps to harden Docker containers and associated runtime environments based on the CIS Docker Benchmark v1.8.0. It covers implementing least-privilege principles, such as running as non-root users, dropping capabilities, using read-only filesystems, and applying seccomp/AppArmor profiles. Use this when preparing containers for production deployment or conducting security audits to minimize the attack surface.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This comprehensive guide outlines a structured methodology for threat hunting and incident response, focusing on identifying adversary persistence mechanisms across Windows endpoints. It covers critical areas such as Registry Run/RunOnce keys, services, scheduled tasks, WMI event subscriptions, and COM hijacking. Use this workflow to proactively detect unauthorized backdoors, strengthen detection rules, and assess overall security posture against MITRE ATT&CK techniques (T1547).

Generates, validates, and ranks publishable research ideas from a broad direction. Surveys the landscape, brainstorms concepts, runs novelty checks, and pilots top candidates within GPU budget constraints.

This skill orchestrates a complete automated pipeline for discovering research ideas. It chains literature review, brainstorming, novelty checks, and pilot testing with GPU constraints to produce validated concepts and experiment plans.

This skill automates the discovery of robotics research ideas by orchestrating a literature survey, idea generation, novelty check, and critical review workflow. It focuses on embodied AI, sim2real, and benchmark-grounded concepts for manipulation, locomotion, and navigation. The pipeline ensures ideas are feasible, falsifiable, and aligned with robotics constraints like simulation-first approaches and hardware availability.

This comprehensive guide details how to design, deploy, and measure a robust anti-phishing security awareness program. By combining regular simulations, interactive role-based learning modules, and metric tracking, organizations can build a strong security-conscious culture. It covers initial baseline assessments, continuous difficulty scaling, and compliance alignment using industry-leading tools like KnowBe4 and Proofpoint.

Explores how to implement AWS IAM Permission Boundaries to cap the maximum permissions granted to users or roles. This advanced security feature allows security teams to safely delegate IAM management to developers for self-service while strictly enforcing the principle of least privilege and preventing privilege escalation in cloud environments.