Skill UI

This comprehensive workflow guides users through a multi-phase process for assessing web application security. It is designed to systematically test for common vulnerabilities listed in the OWASP Top 10, including SQL injection, XSS, broken authentication, and access control issues. Ideal for professional penetration testing, security auditing, and bug bounty hunting.

This comprehensive guide details how to control and audit the scope of code and data accessible by AI tools (like Codeium or Windsurf AI). Learn to implement robust data exclusion patterns, set compliance boundaries (e.g., HIPAA, GDPR), and configure secure deployment modes, ensuring sensitive data and secrets are never processed or retained by the AI model.

A comprehensive skill for leveraging massive pre-trained transformer models across diverse AI domains, including Natural Language Processing (NLP), Computer Vision (CV), and Audio. Use this skill for advanced tasks such as text generation, classification, question answering, summarization, object detection, and model fine-tuning on proprietary datasets. It provides streamlined pipelines and granular control for deployment.

This model provides an engineering operational framework for teams that leverage AI agents to generate large volumes of code. It shifts the focus from simple syntax to process quality, robust architecture design, rigorous testing, and systematic risk control, ensuring the development of highly stable and reliable systems in AI-assisted environments.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This guide outlines a systematic process for transforming any recurring technical pattern, complex debugging solution, or workflow into a standalone, portable skill. It details the multi-step extraction workflow, including pattern identification, structured documentation generation (SKILL.md), and quality control checks to ensure the skill can be reused across different projects.

This specialized skill acts as an expert AI auditor for Food Safety Modernization Act (FSMA) compliance. It is designed to review critical records, including HACCP plans, Preventive Controls, and Supply Chain documentation for food processing facilities. Use it to simulate FDA inspections, identify compliance gaps (such as missing CCPs or inadequate corrective actions), and receive actionable guidance to ensure the highest standards of food safety.

This skill provides a robust and safe mechanism for updating SpecKit templates and configurations from GitHub. It is designed to automatically apply the latest changes while meticulously preserving any existing project customizations, ensuring a non-disruptive workflow. It features a conversational, two-step approval process, guiding the user through the update process, reporting conflicts, and handling fresh installations gracefully. Ideal for developers needing reliable, version-controlled updates to their SpecKit environment.

A comprehensive skill for performing deep security audits on Ethereum smart contracts. Utilizes both static analysis (Slither) and symbolic execution (Mythril) to detect critical vulnerabilities such as reentrancy, integer overflows, and access control issues. This process is crucial for ensuring the security and immutability of financial assets before mainnet deployment.

This skill guides the implementation of comprehensive Identity Governance and Lifecycle Management (IGM) processes. It automates the entire employee identity lifecycle—from pre-hire onboarding (Joiner) to role changes (Mover) and termination (Leaver). Key components include Role-Based Access Control (RBAC) provisioning, periodic access recertification, and remediation of orphaned accounts, ensuring compliance with standards like SOX and GDPR.

This guide outlines the comprehensive process for planning and executing authorized vishing (voice phishing) pretext calls. Used in red teaming exercises, it assesses employee susceptibility to social engineering attacks and evaluates the effectiveness of existing security awareness controls. Key steps include OSINT research, developing believable pretexts (e.g., IT helpdesk impersonation), structured call execution, and collecting detailed metrics.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.