Skill UI

This skill guides the implementation of a full Cyber Threat Intelligence (CTI) program across the six-phase intelligence lifecycle. It covers defining intelligence requirements (PIRs), building collection pipelines, normalizing data, performing analysis, and managing feedback loops. Ideal for maturing existing CTI teams or establishing foundational security intelligence capabilities.

This guide details how to integrate OWASP ZAP (Zed Attack Proxy) into CI/CD pipelines (GitHub Actions/GitLab) for comprehensive Dynamic Application Security Testing (DAST). It covers configuring baseline, full, and API scans to identify common vulnerabilities like XSS, SQLi, and CSRF in running web applications and REST/GraphQL APIs, ensuring security quality gates in the development lifecycle.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.

This tool utilizes Microsoft RESTler to perform stateful REST API fuzzing. It compiles OpenAPI/Swagger specifications into a usable grammar, allowing users to test complex API interaction sequences. It is crucial for discovering state-related bugs, injection vulnerabilities, authentication bypasses, and resource leaks that standard testing might miss. Ideal for continuous security validation in CI/CD pipelines.

A comprehensive guide for performing structured API security testing using Postman. It covers critical OWASP API Security Top 10 vulnerabilities, including BOLA, authentication bypass, and injection flaws. Ideal for building repeatable security regression tests, simulating multi-role user access, and integrating automated validation into CI/CD pipelines via Newman and OWASP ZAP.

This skill guides users through advanced container security practices using Trivy. It covers vulnerability scanning for container images, filesystems, IaC (Terraform, K8s), and Git repositories. Key features include generating industry-standard SBOMs (CycloneDX/SPDX), integrating scanning into CI/CD pipelines, and deploying the Kubernetes Operator for comprehensive supply chain security and compliance auditing.

This skill details implementing Software Composition Analysis (SCA) using Snyk. It helps security teams detect known vulnerabilities, check license compliance, and automate dependency remediation within CI/CD pipelines. Learn to integrate scanning into GitHub, GitLab, and Jenkins workflows, generate automated fix PRs, and continuously monitor deployed applications to safeguard the software supply chain.

Integrates Aqua Security's Trivy scanner into CI/CD pipelines to perform automated vulnerability scanning on Docker images and related artifacts. It detects OS package CVEs, application dependency issues, and Dockerfile misconfigurations. This ensures that only secure, compliant images can proceed to registry push or production deployment by enforcing strict quality gates.

Trivy is a comprehensive open-source scanner designed to detect vulnerabilities in OS packages, language dependencies, misconfigurations, exposed secrets, and license violations within container images. It is essential for integrating security checks into CI/CD pipelines, performing rigorous security assessments, or investigating security incidents. The tool supports generating multiple standardized output formats like SARIF, CycloneDX, and SPDX.

Kubesec is an open-source security risk analysis tool that scores Kubernetes resource manifests to identify security misconfigurations, privilege escalation risks, and policy violations. It checks for best practices like immutable root filesystems and non-root execution. Ideal for integrating into CI/CD pipelines, pre-deployment manifest review, or performing security audits.

This comprehensive guide details best practices for securing Helm chart deployments within Kubernetes. It covers critical security measures including verifying chart signatures and provenance, scanning templates for configuration misconfigurations, enforcing Pod Security Contexts via values.yaml, managing sensitive data using external secret stores, and scoping RBAC roles for CI/CD pipelines. Essential for maintaining supply chain integrity and meeting compliance standards.