Skill UI

This blueprint guides the creation of F.R.I.D.A.Y., a tactical, low-latency voice assistant inspired by Iron Man. It utilizes the specialized Pipecat framework to orchestrate a comprehensive, real-time audio pipeline: STT (OpenAI Whisper/GPT-4o) -> LLM (Gemini) -> TTS (OpenAI Nova). Ideal for developers needing to build advanced, multi-provider, conversational voice applications.

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

A comprehensive skill for optimizing Role-Based Access Control (RBAC) structures. It applies advanced data mining techniques, including clustering (k-means, agglomerative) and Formal Concept Analysis (FCA), to analyze existing user-permission assignments. The goal is to discover the minimal set of necessary roles, thereby preventing 'role explosion,' enforcing the least privilege principle, and ensuring robust identity governance for secure systems.

This guide details advanced techniques for authorized security assessments, focusing on forced browsing. It helps testers discover hidden administrative pages, unprotected APIs, and configuration files by systematically enumerating URLs and challenging application access control mechanisms. Techniques involve using tools like ffuf and Gobuster for comprehensive path and directory discovery.

A comprehensive guide for security teams on detecting and responding to unauthorized crypto mining operations in cloud environments (AWS, Azure). It details a multi-layered approach, utilizing cost anomaly detection, compute utilization monitoring, GuardDuty findings, and network flow log analysis (VPC/KQL) to identify resource hijacking attempts and suspicious activity across EC2, ECS, and EKS workloads.

A comprehensive guide detailing best practices for hardening Docker containers, aligning with CIS Docker Benchmark v1.8.0. It covers host configuration, minimizing attack surface, implementing least privilege, and enhancing runtime security using techniques like read-only filesystems, Seccomp, and AppArmor. Use this when deploying secure, production-grade containerized applications.

This skill provides comprehensive guidance on deploying and tuning Web Application Firewall (WAF) rules across major cloud platforms, including AWS, Azure, and Cloudflare. It details strategies to protect cloud-hosted applications against OWASP Top 10 attacks, implement rate limiting for brute force protection, configure geo-blocking, and refine rules to minimize false positives.

This guide details how to use Google Distroless images to drastically reduce the attack surface of containerized applications. By eliminating shells, package managers, and unnecessary OS utilities, these minimal base images enhance security, align with compliance standards, and improve supply chain security in Kubernetes and Docker deployments. It provides multi-stage build patterns for various languages (Go, Java, Python, Node.js).

Pod Security Admission (PSA) is a built-in Kubernetes admission controller designed to enforce Pod Security Standards (Baseline, Restricted, Privileged) at the namespace level. It serves as a crucial replacement for the deprecated PodSecurityPolicy (PSP), allowing users to implement robust security controls and maintain compliance. By applying specific labels, administrators can set enforcement modes (enforce, audit, warn) to harden container environments against unauthorized privilege escalation and security risks.

A comprehensive guide to configuring ModSecurity WAF with OWASP Core Rule Set (CRS). It covers establishing robust web application logging, tuning rules to minimize false positives, and implementing custom SecRules for advanced threat detection. Essential for security audits, compliance, and architectural hardening.

This tool performs a comprehensive review of OAuth 2.0 scopes, identifying over-permissioned third-party application integrations, excessive API scopes, and unused token grants. It is crucial for implementing the principle of least privilege across complex identity providers and SaaS ecosystems. Use cases include compliance auditing (GDPR, SOC 2), post-incident security reviews, and managing shadow IT risk by auditing cross-boundary consent grants.

A comprehensive guide to performing digital forensics on SQLite databases. This skill covers recovering deleted records from freelists, analyzing Write-Ahead Log (WAL) files, and examining the internal B-tree structure to extract crucial evidence from sources like browser history and messaging apps. Essential for incident response and security auditing.