Skill UI

A comprehensive framework designed for formal procurement decision-making. This skill guides the creation of a weighted scorecard and detailed evaluation criteria by assessing functional fit, commercial terms, security compliance, and vendor stability. Use this when conducting RFPs, comparing multiple suppliers, or making critical software/service provider choices to ensure a holistic, risk-mitigated recommendation.

A comprehensive guide covering the aesthetic and technical implementation of floating User Interface (UI) elements. Learn how to create detached, elevated components, such as cards and navigation bars, giving the application a light, airy, and modern feel across Web (CSS), iOS (SwiftUI), and Flutter platforms. Key principles include soft shadows, generous margins, and pill shapes.

This skill acts as a central router, helping users determine the correct specialized skill or workflow to tackle development challenges. It guides the entire software development lifecycle, from initial idea refinement (Idea -> Ship) and prototype testing, to managing complex multi-session builds and handling incoming bugs via triage. It is essential for navigating the vast ecosystem of AI coding agents.

A comprehensive guide and shared vocabulary for designing and structuring complex software modules. Use this when you need to refine an existing module's interface, identify opportunities for deepening its capabilities, determine optimal internal seams, or improve code testability and AI-navigability. It establishes clear principles for Module, Interface, Depth, and Seam.

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

This framework provides comprehensive detection capabilities for compromised cloud credentials across major platforms including AWS, Azure, and GCP. It analyzes critical threat indicators such as anomalous API activity, impossible travel patterns (impossible login locations), and unauthorized resource provisioning. Designed for incident response, security monitoring, and building robust detection rules to mitigate account takeover and credential abuse.

This guide details the forensic process of extracting sensitive credentials, including password hashes, Kerberos tickets, and authentication tokens, from memory dumps. Utilizing industry-standard tools like Volatility and Mimikatz, this technique is crucial for incident response, determining the scope of a breach, and identifying compromised accounts during digital forensics investigations.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

A comprehensive guide for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically focusing on Microsoft Entra ID (Azure AD). This covers advanced threats like Primary Refresh Token (PRT) abuse, pass-the-cookie attacks, and Adversary-in-the-Middle (AitM) phishing. Use it for investigating anomalous sign-in behavior, configuring risk-based conditional access policies, and enforcing token protection to secure cloud identities.

A comprehensive guide for digital forensics professionals to analyze raw email headers. It details techniques for tracing the true origin of suspicious emails, verifying sender authenticity, and detecting spoofing attacks. Users learn to systematically validate critical security protocols like SPF, DKIM, and DMARC, which is essential for incident response and cybersecurity investigations.

Business Email Compromise (BEC) is a sophisticated fraud scheme relying on social engineering. This skill provides comprehensive guidance on detecting and mitigating BEC attacks. It covers using email gateway rules, behavioral analytics, and implementing financial controls to identify impersonation attempts, altered payment details, and urgent fraudulent requests.

This skill automates the entire phishing incident response workflow using the Splunk SOAR REST API. It parses suspicious email headers and bodies to extract artifacts (URLs, IPs, sender details), creates a structured incident container, triggers a comprehensive automated investigation playbook, and compiles a final verdict report for security teams.