Skill UI

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Hunt TLS/SSL and DNS misconfigurations for authorized security assessments. Covers testssl.sh, sslyze, OpenSSL checks, and guidance on reporting realistic findings.

A systematic, multi-phase workflow designed for diagnosing and resolving complex Linux system issues. It guides users through initial assessment, resource analysis (CPU, memory, disk), process investigation, log analysis, network diagnostics, and service failure resolution. Ideal for system administrators and DevOps engineers handling production incidents.

Authorized OT/ICS security assessment focusing on Purdue model zoning, PLC/SCADA exposure, industrial protocol discovery, and passive-first evaluation discipline. Suitable for authorized security audits, asset identification, and protocol analysis within industrial control networks.

This skill provides a comprehensive command reference for penetration testing tools. It covers network scanning with Nmap, exploitation via Metasploit, password cracking, and web application testing. Users can quickly lookup commands for security assessments, vulnerability identification, and payload generation. It includes examples for host discovery, port scanning, service detection, and common exploit usage.

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation, covering tool selection, configuration, and authorized usage.

This skill enables authorized security testing of desktop thick clients. It focuses on local storage, update channels, IPC, traffic interception, and client-side trust-boundary review. Techniques include reverse engineering, network analysis, and vulnerability assessment for C/S architectures like Electron or .NET.