Skill UI

Systematically review Kubernetes RBAC roles, bindings, and service accounts to surface overly permissive access, privilege escalation paths, and least-privilege violations using tools like rbac-tool and KubiScan.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

This skill automates the scholarly process of refining a generated academic paper. It executes an iterative loop (Review → Fix → Recompile) using advanced LLMs (like GPT-5.5) over multiple rounds. It is designed not for primary research, but specifically for polishing writing quality, correcting theoretical inconsistencies, improving presentation, and enhancing narrative flow after the initial draft is complete. It helps elevate a paper from a draft to a polished submission.

This skill facilitates autonomous, multi-round research review and refinement. It continuously submits work for assessment via external reviewers (Codex or manual), implements suggested fixes, and re-reviews until the designated positive threshold is met or the maximum number of rounds is reached. It manages state persistence and adjusts difficulty levels for rigorous, iterative quality assurance.

This skill automates the research improvement process by creating a closed loop: Review -> Implement Fixes -> Re-review. It leverages any OpenAI-compatible LLM API to iteratively refine research work until a positive assessment is reached or a maximum round limit is hit. Ideal for academic or technical project refinement.

This advanced skill automates the rigorous, iterative review and refinement of complex research topics or papers. It runs multi-round cycles, using an external LLM (MiniMax API) to provide continuous, constructive feedback. The process guides the user through review, fixes, and re-review stages until a positive assessment is achieved or the maximum round limit is reached. It includes robust state persistence for long-running academic workflows.

AWT provides AI coding tools with the ability to perform sophisticated End-to-End (E2E) web testing using a real browser. It accepts declarative YAML scenarios and executes them via Playwright. Key features include visual matching (OpenCV + OCR) instead of relying on fragile DOM selectors, automatic platform detection (React, Vue, etc.), and structured failure diagnosis for improved AI coding workflows.

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

This skill facilitates the creation of real-time incident response dashboards across major SIEM platforms (Splunk, Elastic, Grafana). It provides SOC analysts and leadership with unified situational awareness by tracking affected systems, containment status, Indicators of Compromise (IOC) spread, and the entire incident response timeline, crucial for coordination and post-incident reporting.

This tool guides the creation of comprehensive, standardized incident response playbooks aligned with industry standards like NIST SP 800-61r3 and SANS PICERL. It structures playbooks covering detection, containment, eradication, recovery, and post-incident activities, including decision trees, RACI matrices, and seamless integration pathways for SOAR platforms. Ideal for maturing an organization's security posture and ensuring compliance.

Timesketch is a collaborative, open-source platform for security teams to analyze and reconstruct complex forensic timelines. It ingests and normalizes multi-source security data (logs, artifacts) using methods like Plaso, CSV, and JSONL. Users can visualize event chronology, track attack chains, and utilize advanced built-in analyzers (e.g., Sigma, Chain of Events) for comprehensive incident investigation and documentation.

This solution guides the implementation of a phishing reporting button within email clients, creating a critical feedback loop for security teams. By integrating with SOAR platforms, reported suspicious emails undergo automated triage, including IOC extraction, sandbox analysis, and threat intelligence checks. The workflow enables rapid classification, automated remediation (e.g., mass retraction, sender blocking), and provides detailed feedback to the user reporter, significantly enhancing overall security posture.