Skill UI

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

A comprehensive guide detailing the entire workflow for analyzing embedded firmware. It covers hardware-level extraction methods (UART, JTAG, SPI dump), filesystem analysis (SquashFS, JFFS2), binary reverse engineering using tools like Ghidra, and identifying common vulnerabilities (Buffer Overflow, Command Injection). Ideal for security researchers and embedded systems engineers.

A comprehensive skill designed to manage, track, and persist image assets generated by Ideogram's API. This tool addresses the critical issue of expiring image URLs by implementing a complete lifecycle pipeline. It handles metadata tracking (prompt, seed, model, style, etc.), immediate downloading, and robust storage to both local filesystems and cloud solutions like S3. Features include asset persistence, generation history logging, and image reproduction using stored seed values.

This guide details essential patterns for building fault-tolerant and highly available Replit applications. It covers handling cold starts, implementing graceful shutdowns (via SIGTERM), and crucially, migrating persistent application state from ephemeral local filesystems to robust external storage (like Replit KV or Object Storage). Essential for production-grade deployments.

This pattern addresses the fundamental limitation of context window size by treating the filesystem as a persistent, external memory. Agents can write large outputs, plans, or findings to files, offloading them from the active context. Instead of carrying all information, agents use targeted search and retrieval tools to load only the necessary context on demand, drastically reducing token bloat and improving performance over long, complex tasks.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

Detects unauthorized runtime drift in containers by monitoring binary execution, filesystem changes, and configuration deviation from the original immutable image. Uses Falco and Microsoft Defender for Containers. Ideal for validating immutable-infrastructure controls, hunting for unexpected package installs or binaries, and determining whether a container diverged from its source image.

Authoring and tuning Falco rules to detect container escape techniques, including host filesystem mounts, nsenter usage, privileged containers, kernel module loading, and host manipulation. Covers rule syntax, condition tuning, output fields, priorities, and false positive reduction.

This guide provides comprehensive steps to harden Docker containers and associated runtime environments based on the CIS Docker Benchmark v1.8.0. It covers implementing least-privilege principles, such as running as non-root users, dropping capabilities, using read-only filesystems, and applying seccomp/AppArmor profiles. Use this when preparing containers for production deployment or conducting security audits to minimize the attack surface.

This skill automates the hardening of Linux endpoints (Ubuntu, RHEL, CentOS) by implementing industry-standard security best practices guided by CIS Benchmarks. It systematically secures various layers, including filesystem permissions, network parameters (sysctl), SSH configuration, user access controls (PAM), and integrates deep auditing using auditd and OpenSCAP. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This comprehensive guide provides best practices for hardening container images, dramatically minimizing the attack surface in production environments. It covers advanced techniques such as implementing multi-stage builds, using distroless images, running containers as non-root users, and configuring read-only filesystems. Adherence to CIS Docker Benchmark and secure DevSecOps practices are key focuses.

This skill guides users through advanced container security practices using Trivy. It covers vulnerability scanning for container images, filesystems, IaC (Terraform, K8s), and Git repositories. Key features include generating industry-standard SBOMs (CycloneDX/SPDX), integrating scanning into CI/CD pipelines, and deploying the Kubernetes Operator for comprehensive supply chain security and compliance auditing.