Skill UI

A comprehensive guide to implementing best practices for security within Databricks. Learn how to manage secrets using scoped storage, enforce the principle of least privilege via Unity Catalog grants, audit API tokens, and apply advanced data protection techniques like column-level masking and row-level security for enhanced data governance and compliance.

This comprehensive guide details the end-to-end setup for Granola AI, an advanced AI meeting note-taking solution. It covers initial installation on macOS/Windows, authenticating with major cloud services (Google/Microsoft), and critically, granting all necessary system permissions (Screen Recording, Microphone) to ensure seamless, background audio capture and transcription. Use this guide when setting up Granola for the first time or troubleshooting connectivity issues.

Structured manuscript and grant review guidance that walks reviewers through methodology, statistics, reporting compliance, and constructive feedback for rigorous scientific evaluation across disciplines.

Craft competitive research proposals for NSF, NIH, DOE, DARPA, and Taiwan NSTC by aligning narratives with agency review criteria, detailing budgets, personnel plans, and broader impacts, and incorporating required AI-generated schematics via the scientific-schematics skill.

Provides LaTeX templates, formatting rules, and submission guidance covering journals (Nature, Science, PLOS, IEEE, ACM), conferences (NeurIPS, ICML, CVPR, CHI, etc.), posters, and grants so researchers can prepare compliant manuscripts efficiently.

This skill analyzes Active Directory (AD) Access Control Lists (ACLs) to detect dangerous misconfigurations. It uses the ldap3 Python library to query domain controllers, parse security descriptors (SDDL), and identify instances where non-privileged users or groups are granted dangerous permissions like GenericAll, WriteDACL, or WriteOwner on sensitive objects. Essential for security incident response and privilege escalation path discovery.

This skill utilizes the Microsoft Graph API to parse Office 365 Unified Audit Logs for security incident investigation. It is designed to detect critical indicators of account compromise, including the creation of suspicious email forwarding rules, unauthorized mailbox delegation changes, suspicious OAuth application consent grants, and other signs related to Business Email Compromise (BEC).

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

This skill analyzes Azure AD/Microsoft Entra ID environments to detect illicit OAuth application consent grants. It leverages the Microsoft Graph API and directory audit logs to enumerate permissions, identify overly broad scopes, and flag high-risk applications based on publisher verification status. It is essential for SOC analysts and threat hunters investigating cloud identity security incidents.

Explores how to implement AWS IAM Permission Boundaries to cap the maximum permissions granted to users or roles. This advanced security feature allows security teams to safely delegate IAM management to developers for self-service while strictly enforcing the principle of least privilege and preventing privilege escalation in cloud environments.

This guide details how to implement robust device posture assessment within a Zero Trust Architecture (ZTA). It integrates endpoint health signals from major platforms like CrowdStrike ZTA, Microsoft Intune, and Jamf into conditional access policies. Use this to enforce strict compliance checks (e.g., encryption, patch levels) before granting access to critical corporate resources, significantly hardening the security perimeter.

This skill guides the implementation of continuous, risk-adaptive identity verification crucial for Zero Trust Architecture (ZTA). It covers deploying phishing-resistant MFA (FIDO2/WebAuthn), advanced risk-based conditional access policies, and identity governance strategies. Users learn how to move beyond traditional credentials by leveraging multiple signals—such as device posture, behavioral biometrics, and location context—to dynamically assess and enforce trust levels before granting access.