Skill UI

A comprehensive framework for advanced forensic analysis of UEFI firmware and boot process integrity. It details methods to detect firmware implants in SPI flash, audit UEFI variables (PK, KEK, DB), inspect the EFI System Partition (ESP) for unauthorized components, and analyze boot chain anomalies. Ideal for investigating advanced persistent threats (APTs) and verifying system security posture against rootkits and bootkit techniques.

This skill outlines the architecture and methodology for deploying canary files (honeytokens) across critical file systems. By placing decoy documents with known content in high-value locations, this system monitors for unauthorized modifications, deletions, or encryption attempts. It detects ransomware by triggering high-fidelity alerts via File Integrity Monitoring (FIM) systems, serving as a crucial deception layer that complements existing EDR/AV solutions.

An automated verification system designed for critical healthcare application deployments (EMR/EHR). This harness enforces stringent patient safety standards by running multiple mandatory test gates, including Clinical Decision Support System (CDSS) accuracy, Protected Health Information (PHI) leakage prevention, and data integrity checks. A single failure in critical gates automatically blocks deployment, ensuring regulatory compliance and optimal patient safety in the CI/CD pipeline.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

This skill provides a comprehensive framework for validating backup reliability. It automates processes like cryptographic hash verification, running simulated restores to isolated environments, detecting silent data corruption (bit rot), and scanning for ransomware indicators. Use it before relying on backups during a major incident or ransomware attack to ensure data recoverability and compliance.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.

This skill simulates a Social Psychologist to diagnose specific trust barriers a target audience holds toward a brand, offer, or category. It prescribes the exact, strategic signals (e.g., credentials, transparency, proofs) needed to build credibility. Use it when communicating with skeptical audiences or when existing messaging fails to convert due to lack of trust. It calibrates trust across ability, benevolence, and integrity.

This skill provides a comprehensive guide for integrating and managing Firebase App Check in Flutter applications. It covers selecting the correct platform attestation providers (e.g., Play Integrity, DeviceCheck, reCAPTCHA), initializing the service, handling debug tokens, and executing a secure enforcement rollout. Mastering App Check is critical for protecting backend resources from unauthorized access, significantly enhancing application security.

This guide details best practices for using `lark-cli` to interact with Feishu resources. It covers initial configuration, switching between user and bot identities, and crucial authentication flows for AI agents. It provides detailed instructions on handling permission errors, implementing secure split-flow authentication, and managing high-risk write operations to ensure data integrity and user consent.

Create, update, and connect nodes/edges inside Obsidian .canvas files, enabling structured mind maps, flowcharts, and visual canvases by validating IDs, spacing, and JSON integrity.

This skill provides robust mechanisms to verify the integrity of AI agent plugins, tools, and dependencies. It generates deterministic SHA-256 manifests (INTEGRITY.json) for all components, allowing users to detect unauthorized modifications, track provenance, and ensure that deployed assets match their published versions. Use this during CI/CD pipelines, code review, and pre-production promotion to secure the entire agent ecosystem.

Automates the generation of robust, DB-agnostic integration test cases for data access layers (DAL) during major database migrations, specifically from Oracle to PostgreSQL. These tests validate behavioral consistency across both source and target database systems, ensuring that core business logic remains intact after the migration process. Essential for maintaining data integrity and application stability.