Skill UI

Guides security teams through Forseti, SCC, and gcloud workflows to audit IAM policies, firewall rules, bucket permissions, and CIS benchmark compliance across GCP organizations with optional ScoutSuite comparison and BigQuery exports for analysis.

A guided workflow for auditing AWS Lambda, Azure Functions, and GCP Cloud Functions to catch permissive execution roles, exposed secrets, and missing runtime protections before deployment.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Guides cloud security teams through setting up Microsoft Defender for Cloud to protect Azure workloads, extend CNAPP coverage to AWS/GCP, manage Secure Score, and monitor threats centrally via the unified Defender portal.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Detects and prevents injection attacks targeting serverless functions by combining static analysis, event mapping, runtime behavior monitoring, and IAM auditing so SOCs can spot poisoned triggers, malicious layers, and privilege escalations across Lambda, Azure, and GCP environments.

Automates SOC 2 Type II readiness by assessing gaps versus AICPA Trust Services Criteria, continuously collecting evidence from AWS, Azure, GCP, Okta, GitHub, and Jira, validating controls, tracking remediation, and keeping compliance posture between audits.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

This skill is designed to detect and rewrite text that exhibits common characteristics of AI-generated Chinese writing, such as rigid structures, mechanical connectors, and over-polished phrasing. It helps users 'de-AI' their content by restoring natural human rhythm. Key use cases include reducing AIGC signals in academic papers (for CNKI/VIP checks), and converting the writing tone to specific styles like Zhihu, Xiaohongshu, or literary prose.

A comprehensive static analysis tool for Go projects that ensures code adheres to best practices. It aggregates over 100 linters and manages configuration via .golangci.yml. Used extensively during development workflows and CI/CD pipelines for automated fixing, style enforcement, and identifying potential bugs.

Provides comprehensive patterns and methodologies for optimizing Go application performance. Covers critical areas like allocation reduction, CPU efficiency, memory layout, GC tuning, and hot-path optimization. Use this skill when profiling identifies a bottleneck, guiding the iterative cycle of profiling, benchmarking, diagnosing, and improving code.

Enables structured cloud penetration testing across Azure, AWS, and GCP by guiding reconnaissance, authentication, enumeration, exploitation, and persistence workflows for authorized assessments.