Skill UI

A powerful PreToolUse hook designed to act as a safety net during code writing sessions. It automatically scans both file paths and content for 12 common security anti-patterns, including SQL injection, XSS, command injection (Node.js/Python), and unsafe deserialization. It blocks the writing operation and provides immediate warnings, ensuring adherence to secure coding practices when handling sensitive code like authentication or payment logic.

A comprehensive tool for BizOps and VMO operators to conduct proactive, multi-dimensional vendor performance audits. It scores SaaS and third-party vendors using weighted criteria (reliability, security, support), tracks SLA compliance to identify potential credit claims, and classifies third-party risk across critical vectors (data, financial, regulatory). Ideal for quarterly vendor health checks and defensible renewal recommendations.

A comprehensive guide for securing container images and runtime environments. Covers best practices from Dockerfile authoring (minimal base images, multi-stage builds, non-root users) through advanced runtime enforcement (seccomp, AppArmor) and Kubernetes security controls. Essential for production hardening and maintaining supply chain integrity.

A comprehensive, multi-phase quality assurance tool designed for Next.js fullstack applications. It verifies production readiness by checking code integrity, build success, SEO metadata, API authentication, route stability, performance, and security vulnerabilities. Use it as a mandatory pre-deployment checklist before promoting an app to production.

This skill provides expert guidance on writing and executing C# scripts to manipulate Power BI semantic model metadata using Tabular Editor. It enables advanced automation for bulk operations, managing calculation groups, setting security roles (RLS/OLS), and automating complex model changes via the TOM API. Supports both TE2 and TE3 environments.

A detailed, comprehensive reference guide covering best practices for securing modern applications. This checklist spans network architecture, API design, data encryption, authentication protocols, and regulatory compliance (GDPR, HIPAA, PCI-DSS), ensuring robust security across the entire technology stack.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.

This skill uses Python and boto3 to analyze AWS CloudTrail logs. It establishes statistical baselines of normal API activity and detects various anomalies, such as unusual event sources, first-time API usage, geographic IP deviations, and high-frequency calls. This is critical for identifying credential compromise, privilege escalation, and unauthorized resource access in a security incident.

This guide details the process of deploying and configuring Proofpoint Email Protection, a cloud-native Secure Email Gateway (SEG). It establishes a critical security checkpoint for all mail traffic, protecting users from advanced threats including phishing, malware, Business Email Compromise (BEC), and spam. The implementation covers architectural planning, advanced threat defense (sandboxing, ML classifiers), and compliance with protocols like DMARC, SPF, and DKIM.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

This methodology guides organizations through a comprehensive cybersecurity risk assessment using the NIST SP 800-30 framework. It systematically identifies threat sources, vulnerabilities, and potential threat events. By determining the likelihood and impact of these threats, the process calculates overall risk, resulting in a prioritized, defensible risk register. Essential for compliance (e.g., ISO 27001, HIPAA), system authorization, and strategic risk reporting.

A comprehensive guide for digital forensics professionals to analyze raw email headers. It details techniques for tracing the true origin of suspicious emails, verifying sender authenticity, and detecting spoofing attacks. Users learn to systematically validate critical security protocols like SPF, DKIM, and DMARC, which is essential for incident response and cybersecurity investigations.