Skill UI

ScoutSuite is an open-source, agentless tool designed for comprehensive AWS security posture assessment. It queries AWS APIs to automatically enumerate resources across various services, identify critical misconfigurations (like public S3 buckets or overly permissive IAM roles), and generate an interactive HTML report. It is ideal for conducting cloud security audits, compliance checks, or incident response procedures using read-only credentials.

Provides detailed, cloud-native procedures for containing security incidents across major platforms (AWS, Azure, GCP). The guide outlines how to revoke compromised IAM credentials, isolate resources using network security groups and ACLs, and preserve forensic evidence through snapshots and policy enforcement, minimizing lateral movement risk during an active breach.

Provides a comprehensive guide to auditing the security posture of the etcd cluster, the critical key-value store backing Kubernetes. This assessment covers encryption at rest for secrets, TLS transport security, access control policies, secure backup procedures, and network isolation best practices. Essential for hardening control planes and ensuring regulatory compliance.

Automate Open Source Intelligence (OSINT) collection and target profiling using the SpiderFoot REST API and CLI. This tool leverages over 200 modules to map an organization's attack surface, collecting structured data including domains, IPs, email addresses, leaked credentials, and DNS records. Ideal for conducting comprehensive security assessments, threat intelligence gathering, and incident response procedures.

This skill simulates security incidents using discussion-based tabletop exercises for Security Operations Center (SOC) teams. It is designed to test incident response procedures, evaluate cross-functional communication workflows (e.g., Legal, PR, Executive), and assess decision-making capabilities under pressure, all without touching production environments. Ideal for compliance validation, playbook refinement, and comprehensive team training.

A comprehensive guide detailing systematic steps to remediate Amazon S3 bucket misconfigurations that expose sensitive data. Procedures include enabling S3 Block Public Access, auditing and restricting overly permissive policies and ACLs, enforcing default server-side encryption (KMS/AES-256), and using AWS Config/Security Hub for automated compliance checks. Essential for achieving robust cloud storage security compliance.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

This skill guides users to discover and install specialized agent capabilities from a vast open marketplace. It handles complex natural language queries like "how do I do X" or "find a skill for Y," ensuring the user receives the most relevant, high-quality, and battle-tested tools for development, testing, or design tasks, followed by secure, managed installation procedures.

A comprehensive guide for deploying, configuring, and maintaining the OpenViking server in production environments. It covers service configuration management, environment setup using `uv` for virtual environments, reliable startup procedures using `nohup`, graceful shutdown methods, and critical data cleanup workflows. This resource is essential for DevOps engineers and system administrators managing OpenViking services.

Guides security teams through using Metasploit’s console, modules, payloads, and Meterpreter workflow for authorized penetration tests and post-exploitation procedures.

This guide outlines the structure and content guidelines for an AGENTS.md file. This file serves as a comprehensive 'README for agents,' providing detailed, technical context and operational instructions (such as setup, development workflow, testing procedures, and code style) that enable advanced AI coding agents to interact with and understand a codebase effectively. It greatly complements traditional READMEs by focusing purely on machine-readable technical requirements.

Builds production-ready rollout plans covering checks, procedures, verification signals, rollback, and communications for infrastructure or application changes across environments.