Skill UI

This comprehensive curriculum provides a detailed roadmap for mastering exploit development and vulnerability research. It covers fundamental techniques like fuzzy testing using AFL++, and progresses through advanced topics such as in-process fuzzing with Google FuzzTest. It is ideal for structuring professional security training programs or onboarding new research engineers.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

A comprehensive go/no-go checklist for deploying OneNote integrations using the Microsoft Graph API. It covers critical production failure points, including advanced authentication resilience (token caching, silent renewal), rate limit handling (exponential backoff, tenant-level tracking), and explicit error code management for robust deployment. Essential for launch reviews.

This skill provides advanced rate limit handling for the OneNote Graph API. It implements a token bucket algorithm and queue-based throttling mechanism to prevent hitting rate limits (429 errors). It correctly parses the 'Retry-After' header and manages both per-user and per-tenant usage quotas, ensuring stable, high-throughput integrations.

This skill provides a comprehensive guide and code examples for designing robust and scalable Identity and Access Management (IAM) structures within Oracle Cloud Infrastructure (OCI). It covers establishing secure compartment hierarchies, understanding complex policy inheritance rules, implementing least-privilege access controls, and utilizing dynamic groups for service authentication, ensuring best practices for enterprise cloud governance.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.

This framework implements the OWASP Top 10 standards, specifically tailored for Agentic Applications. It provides a standardized methodology to classify and map diverse security findings—such as prompt injection, tool misuse, and privilege abuse—to ten core risk categories (ASI01-ASI10). It is essential for security teams to systematically assess, prioritize, and remediate vulnerabilities inherent in complex AI agent systems.

Implement robust data governance and security measures within Palantir Foundry. This skill guides users through PII redaction, applying data markings (e.g., CONFIDENTIAL, RESTRICTED), ensuring GDPR/CCPA compliance, and establishing automated data retention policies. It provides methods for column-level security and auditable deletion workflows for sensitive information.

This guide teaches best practices for configuring robust, enterprise-grade Role-Based Access Control (RBAC) within Palantir Foundry. Learn how to define project roles (Viewer, Editor, Owner), manage organization-level groups to enforce least privilege, establish secure service user accounts for external integrations, and utilize marking-based data classification to ensure data governance and security across large datasets.

A comprehensive checklist for deploying Foundry-integrated applications to a production environment. It guides users through critical go-live procedures, covering pre-deployment credential management, rigorous code quality checks, setting up robust monitoring and alerting systems, and executing safe rollout and rollback strategies. Essential for ensuring system stability during major releases.

This technique guides users through a rigorous two-phase research strategy. First, conduct a broad search to identify potential papers or authors. Crucially, the system instructs the user to use the extracted "author full name" as a highly specific anchor in subsequent queries. Combining the author's name with details like journal, institution, year, or biographical information ensures the most precise and reliable results, significantly narrowing down the search scope and achieving deep academic insights.

Performs rigorous, zero-context verification of all quantitative claims, comparisons, and scope statements reported in a research paper against the raw evidence files. It is designed to detect confirmation bias, such as rounding errors, data cherry-picking, or misreported deltas, ensuring strict fidelity between published claims and underlying raw results. Ideal for pre-submission quality control.