Skill UI

This meta-skill provides a comprehensive framework for the entire lifecycle of AI agent skills. It supports creating, refactoring, rigorously evaluating (e.g., Skill OS 2.0 Gates), and securely packaging skills from various sources like workflows, prompts, and documents. It ensures standardized, team-ready, and governed deployment of advanced AI capabilities.

Builds comprehensive identity governance and lifecycle management processes. Automates the entire employee journey (Joiner, Mover, Leaver) from the authoritative HR source of truth. This process handles role-based access provisioning, access request workflows, periodic recertification, and remediation of orphaned accounts, ensuring continuous compliance with standards like SOX and GDPR.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

A comprehensive skill for monitoring dark web forums, marketplaces, and leak sites to detect mentions of organizational assets, leaked credentials, and ongoing threat actor activities. Used for proactive threat intelligence gathering, incident response enrichment, and establishing continuous dark web OSINT coverage.

A comprehensive methodology for planning, running, and measuring strategic adversary engagement operations using the MITRE Engage framework. It guides teams beyond ad hoc deception by defining measurable Goals (Expose, Affect, Elicit), Operational Objectives, and mapping activities to specific MITRE ATT&CK techniques. Essential for building formal denial and deception programs.

A comprehensive guide to executing the NIST Risk Management Framework (RMF) to achieve an Authorization to Operate (ATO). This covers the full lifecycle, including preparation, system categorization (FIPS 199), control selection and tailoring (SP 800-53 Rev 5), implementation, assessment (SAR), and continuous monitoring. Essential for organizations working under FISMA or FedRAMP.

This skill details the implementation of continuous identity verification for Zero Trust architectures. It covers deploying phishing-resistant Multi-Factor Authentication (FIDO2/WebAuthn), establishing risk-based conditional access policies, and integrating identity governance controls aligned with NIST and CISA frameworks. Learn how to move beyond traditional passwords to dynamic, adaptive security models.

This guide provides a deep dive into the cryptographic techniques used by ransomware, including AES, RSA, ChaCha20, and hybrid schemes. It covers identifying algorithms, analyzing key management patterns (strong, weak, flawed), and reverse engineering file encryption routines to assess decryption feasibility and support recovery efforts.

Provides a comprehensive guide to implementing Zero Trust Network Architecture on Google Cloud Platform (GCP) using Identity-Aware Proxy (IAP). It enforces rigorous, per-request identity verification and context-aware authorization for services like Compute Engine, App Engine, and Cloud Run. This ensures that only authenticated users who meet specific criteria (e.g., device posture, corporate location, time window) can access protected resources, eliminating reliance on public IPs or VPNs.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.

This toolkit provides comprehensive offensive and administrative capabilities for Microsoft Entra ID, Azure AD, and AD FS. It allows authorized penetration testers to perform unauthenticated reconnaissance, acquire various access tokens, and critically, test for federation backdoors (Golden SAML). It is essential for validating identity-attack resilience and producing detailed hardening recommendations during red-team engagements.

An AI assistant for generating and analyzing Chinese Bazi (Four Pillars) and Ziwei Dou Shu charts using precise algorithms, supporting individual analysis, cross-validation, and structured report generation.