Skill UI

An automated verification system designed for critical healthcare application deployments (EMR/EHR). This harness enforces stringent patient safety standards by running multiple mandatory test gates, including Clinical Decision Support System (CDSS) accuracy, Protected Health Information (PHI) leakage prevention, and data integrity checks. A single failure in critical gates automatically blocks deployment, ensuring regulatory compliance and optimal patient safety in the CI/CD pipeline.

A comprehensive guide to hardening Windows Active Directory environments using Group Policy Objects (GPO). This skill configures multiple layers of defense, including AppLocker, Controlled Folder Access, and Attack Surface Reduction (ASR) rules, to prevent ransomware execution paths, block unauthorized file modifications, and restrict lateral movement across the domain.

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

This guide provides a comprehensive blueprint for implementing robust Data Loss Prevention (DLP) policies using Microsoft Purview. It covers the configuration of sensitivity labels (encryption, content marking) and the creation of custom DLP rules using regex patterns. The workflow extends to endpoint DLP deployment for controlling file operations on Windows and macOS devices, ensuring sensitive data protection across SharePoint, Exchange, and OneDrive. It leverages PowerShell and the Microsoft Graph API for advanced, programmatic compliance management.

This framework implements robust input and output validation guardrails for LLM-powered applications. It prevents prompt injection, detects and redacts PII, filters toxic content, and validates model outputs against defined schemas. Use it when deploying AI agents that handle sensitive data or require strict adherence to corporate policies, ensuring a secure and trustworthy AI interaction layer.

A comprehensive guide and technical framework for detecting and mitigating ransomware kill switch mechanisms. It details methods for analyzing mutex guards, domain-based communication, and registry checks. Learn how to deploy proactive mutex vaccination and use Sysmon/DNS monitoring to prevent malware execution during incident response and analysis.

The Safety Guard skill is designed to prevent destructive actions when working in production systems or when autonomous agents are executing tasks. It offers three protection modes (Careful, Freeze, and Guard) to monitor dangerous commands, lock specific directories, and ensure code changes are confined to intended areas, enhancing system stability and security.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Handles Feishu calendar operations like creating and updating events, inviting attendees, querying availability, and managing repeat instances with timezone-aware ISO 8601 inputs, ensuring hosts stay in sync with RSVPs.

This skill generates a comprehensive keyword strategy by identifying high-value SEO and AEO question queries for any given topic. It structures keywords into three difficulty tiers (T1, T2, T3), performs cannibalization checks to prevent content overlap, and builds a complete content map, guiding users on content type and production order for maximum search engine visibility.

This guide outlines how to build new API connectors or providers that strictly adhere to the existing integration architecture and patterns of a target repository. It is designed for adding integrations while maintaining architectural consistency (e.g., layout, configuration schema, authentication model, and testing style), preventing the creation of novel, unsupported patterns.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.