Skill UI

Provides detailed, cloud-native procedures for containing security incidents across major platforms (AWS, Azure, GCP). The guide outlines how to revoke compromised IAM credentials, isolate resources using network security groups and ACLs, and preserve forensic evidence through snapshots and policy enforcement, minimizing lateral movement risk during an active breach.

This skill guides users on performing deep runtime threat detection and forensics in cloud-native environments using Falco. It leverages Falco YAML rules to monitor syscalls, detecting critical security events such as shell spawning, file tampering (e.g., /etc/shadow), network anomalies, and privilege escalation within containers and Kubernetes clusters. Ideal for incident response, security auditing, and validating container runtime security controls.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

This guide details the process of file carving using the Foremost tool in digital forensics. It demonstrates how to recover deleted or fragmented evidence (such as documents, images, and archives) from raw disk images or unallocated space by analyzing file headers and footers, independent of the file system's index. It also covers advanced techniques using custom signatures and high-performance alternatives like Scalpel.

A comprehensive guide detailing the process of acquiring and analyzing data from smartphones and tablets. It covers best practices for device isolation, physical/logical acquisition using tools like Cellebrite UFED and open-source alternatives (ALEAPP, iLEAPP), and subsequent deep analysis of communications, call logs, and application artifacts for legal or corporate investigations.

This tool orchestrates safe vulnerability assessments for Operational Technology (OT) and Industrial Control Systems (ICS) environments. It prioritizes safety by guiding users through passive monitoring, native protocol querying, and carefully controlled active scanning methods, specifically designed to identify vulnerabilities without risk of disrupting industrial processes or crashing legacy controllers. Essential for compliance audits (e.g., IEC 62443).

Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers. It normalizes various threat intelligence objects (indicators, actors) into platform-native schemas, enabling automated ingestion, validation, and routing to SIEM, TIP, and EDR systems. Ideal for integrating new ISAC feeds or building bi-directional intelligence pipelines.

This comprehensive guide covers the principles and implementation steps for building Progressive Web Apps (PWAs). Learn to integrate essential components like Web App Manifests and Service Workers to ensure your web application offers a reliable, fast, and truly offline-capable experience, mimicking the feel of a native mobile app. Ideal for enhancing web resilience and installability.

This skill helps developers structure and record critical architectural decisions (ADRs) made during coding sessions. It automatically detects moments of decision, capturing the context, alternatives considered, and the rationale (trade-offs and consequences). This maintains a living log that explains 'why' the code base was built the way it is, preventing knowledge loss and improving project maintainability.

A comprehensive guide for building or reviewing SwiftUI User Interfaces that utilize the modern Liquid Glass aesthetic. This skill focuses on correctly implementing native Apple APIs (like `glassEffect` and `GlassEffectContainer`) while ensuring proper fallback mechanisms, modifier ordering, and performance for iOS 26+ devices. Ideal for adopting cutting-edge iOS design patterns.

A comprehensive guide detailing best practices for executing commands on Windows using PowerShell and CMD. It addresses critical pitfalls such as handling spaces in file paths, ensuring correct character encoding (UTF-8), using native cmdlets, and managing long path limits. Essential for developers building robust, cross-platform Windows automation scripts.

AKF is the native metadata format specifically designed for tracking AI-generated or AI-modified content. It allows users to stamp files (including DOCX, PDF, images, and code) with detailed trust scores, source provenance, and compliance metadata. This tool is essential for professional workflows requiring strict auditing, compliance assurance, and verifiable data lineage, especially concerning regulations like the EU AI Act, HIPAA, and SOX.