Skill UI

A comprehensive reference guide detailing modern and idiomatic PHP coding standards. It covers best practices across various topics, including type safety (strict typing, union types), object-oriented programming (constructor promotion, enums, match expressions), efficient array handling, robust error handling (exceptions), and modern string manipulation functions. Ideal for developers looking to upgrade legacy PHP code to modern, clean, and performant standards.

A comprehensive guide detailing modern, idiomatic, and efficient patterns for TypeScript and JavaScript development. It covers essential best practices from array manipulation (map, reduce) and destructuring to advanced asynchronous handling (async/await, Promise.all) and type safety best practices, helping developers write cleaner, more robust, and performant code.

This solution provides a comprehensive framework for detecting compromised cloud credentials across AWS, Azure, and GCP. It analyzes anomalous API activity, impossible travel patterns, and indicators of credential stuffing by leveraging services like AWS GuardDuty, Azure Defender, and GCP SCC. Use this when investigating suspicious cloud API calls, responding to exposed credential alerts, or scoping a potential account takeover.

This skill uses Python and boto3 to analyze AWS CloudTrail logs. It establishes statistical baselines of normal API activity and detects various anomalies, such as unusual event sources, first-time API usage, geographic IP deviations, and high-frequency calls. This is critical for identifying credential compromise, privilege escalation, and unauthorized resource access in a security incident.

This guide details how to configure Microsoft Entra Privileged Identity Management (PIM) to enforce Zero Trust principles. It converts standing, permanent privileged roles into eligible, time-bound assignments, requiring mandatory justification, MFA, and approval workflows before activation. Ideal for achieving strict role-assignment auditing and comprehensive identity governance in hybrid cloud environments.

A comprehensive guide to hardening AWS Identity and Access Management (IAM) configurations. This skill enforces least-privilege access by utilizing IAM Access Analyzer, setting permission boundaries, scoping policies, and managing credential rotation. It is crucial for reducing the blast radius of compromised accounts and passing compliance audits (e.g., SOC 2, PCI-DSS).

This guide details the process of deploying and configuring Proofpoint Email Protection, a cloud-native Secure Email Gateway (SEG). It establishes a critical security checkpoint for all mail traffic, protecting users from advanced threats including phishing, malware, Business Email Compromise (BEC), and spam. The implementation covers architectural planning, advanced threat defense (sandboxing, ML classifiers), and compliance with protocols like DMARC, SPF, and DKIM.

This guide outlines the comprehensive process of access recertification (or access review) using Saviynt Enterprise Identity Cloud. It details how to automate periodic validation of user entitlements to ensure adherence to the principle of least privilege. This function is critical for maintaining compliance with major standards such as SOX, SOC 2, and HIPAA. The process covers configuring various campaign types, managing the decision lifecycle (Approve/Revoke), and implementing remediation workflows.

Falco is a powerful CNCF project for real-time runtime security monitoring. This guide teaches authors how to write and deploy custom detection rules using Falco's robust YAML rule engine and modern eBPF driver. It is designed to detect critical threats such as container escapes, namespace manipulation, privileged mounts, and anomalous syscalls in Kubernetes and Docker environments, significantly hardening the overall container security posture.

This skill provides comprehensive techniques for security-testing Retrieval-Augmented Generation (RAG) pipelines. It probes for indirect prompt injection, which occurs when malicious instructions are embedded in retrieved documents, and tests for embedding-space manipulation. Using advanced tools like NVIDIA garak, Promptfoo, and PyRIT against vector stores (FAISS, Chroma, etc.), users can validate retrieval guardrails and secure CI/CD gates against adversarial inputs and data leakage.

A comprehensive guide detailing security patterns and audit checklists for Automated Market Maker (AMM) smart contracts in DeFi. Covers critical vulnerabilities such as flash loans, slippage, reentrancy attacks, price manipulation, and integer overflow/underflow. Essential for reviewing major DeFi protocols like Uniswap.

A powerful skill for generating brand-new images or performing professional edits on existing photos using the OpenAI GPT Image API. Users can provide detailed prompts, specify desired aspect ratios (e.g., 1024x1536), select background types, and control output quality. Ideal for creative projects, logo design, concept art, and advanced photo manipulation.