Skill UI

Analyzes a website’s HTTP security headers to identify missing or misconfigured directives, then produces a graded report with scores and recommendations for strengthening protections against common web threats.

This skill provides advanced, dual-use security techniques for analyzing protected binaries, including malware and proprietary software. It is strictly intended for authorized security professionals, such as those conducting penetration testing, malware analysis, or academic security research (CTFs). Users must exercise extreme caution, confirm explicit written authorization, and ensure all activities remain within defined legal and ethical scopes to prevent misuse and legal violations.

This skill provides advanced, dual-use security techniques for analyzing protected binaries, including malware and proprietary software. It is strictly intended for authorized security professionals, such as those conducting penetration testing, malware analysis, or academic security research (CTFs). Users must exercise extreme caution, confirm explicit written authorization, and ensure all activities remain within defined legal and ethical scopes to prevent misuse and legal violations.

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

Guides teams through applying Apollo.io API security best practices, covering secure key management, data protection, role-based access, and audit checklists for integrations.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Provides expert AWS architecture, security, and implementation guidance backed by MCP tooling, helping teams choose services, migrate workloads, and troubleshoot production issues.

Guide to reviewing AWS IAM policies, enforcing MFA, rotating keys, and applying least-privilege templates so teams can harden access controls and reduce overly permissive permissions.

Client library for .NET that manages cryptographic keys in Azure Key Vault and Managed HSM, covering creation, rotation, encryption, decryption, signing, verification, backup, restore, and HSM-backed protection workflows.

Azure Key Vault Secrets Java SDK for secret management. Use when storing, retrieving, or managing passwords, API keys, connection strings, or other sensitive configuration data.

Guides secure backend coding practices, focusing on validation, authentication, API security, database protection, and defensive error handling for implementation or reviews.