Skill UI

This SDK provides comprehensive, production-ready patterns for interacting with the OpenEvidence clinical evidence API. It enables developers to efficiently query medical literature, retrieve clinical guidelines, and generate evidence-based recommendations. Key features include a singleton client for consistent authentication, robust error wrappers (handling retries, invalid keys), and structured data models designed to ensure audit compliance and detailed citation provenance in complex healthcare applications.

This tool correlates multiple system artifacts, including Windows registry keys (USBSTOR, MountedDevices), Event Logs, and SetupAPI logs, to reconstruct a detailed timeline of USB device usage. It determines first/last connection timestamps, tracks device provenance, and maps drive letter assignments. Essential for digital forensics investigations, insider threat detection, and verifying compliance regarding removable media usage.

This skill details implementing robust container supply chain security using Cosign, a Sigstore tool. It supports both key-based and keyless (OIDC) signing, integrating with Fulcio and Rekor. Use it to verify image provenance, attach critical attestations (like SBOMs and SLSA), and enforce secure image policies in Kubernetes environments.

Leverage the in-toto framework to enforce software supply chain integrity for container builds. This method generates cryptographically signed attestations (link metadata) at every stage—from code checkout to scanning—verifying that the deployed container image followed a predefined and approved build process. It is essential for implementing robust security controls, especially when requiring verifiable provenance before deployment in Kubernetes environments.

Comprehensive guide on hardening the open-source Harbor container registry. It details configurations for advanced security features including integrated Trivy vulnerability scanning, Notary/Cosign image signing for content trust, fine-grained RBAC, immutable tag retention, and OIDC authentication. Use this when deploying or auditing a registry to ensure image provenance and compliance.

This skill provides comprehensive methods for securing Helm chart deployments on Kubernetes. It covers validating chart provenance through signature verification, scanning templates for misconfigurations (using tools like kubesec and checkov), enforcing strict pod/container security contexts, managing secrets via external stores, and implementing precise RBAC controls within CI/CD pipelines. Ideal for compliance and robust security architecture.

AKF is the native metadata format specifically designed for tracking AI-generated or AI-modified content. It allows users to stamp files (including DOCX, PDF, images, and code) with detailed trust scores, source provenance, and compliance metadata. This tool is essential for professional workflows requiring strict auditing, compliance assurance, and verifiable data lineage, especially concerning regulations like the EU AI Act, HIPAA, and SOX.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.

This skill provides robust mechanisms to verify the integrity of AI agent plugins, tools, and dependencies. It generates deterministic SHA-256 manifests (INTEGRITY.json) for all components, allowing users to detect unauthorized modifications, track provenance, and ensure that deployed assets match their published versions. Use this during CI/CD pipelines, code review, and pre-production promotion to secure the entire agent ecosystem.

Utilize advanced media intelligence to analyze audio, image, video, and text for synthetic manipulation and AI-generated content. This skill detects deepfakes, traces the original AI synthesis source, applies and detects watermarks, verifies speaker identity, and provides comprehensive media provenance analysis, ensuring media authenticity claims are rigorously supported.

A comprehensive guide for advanced geospatial data processing using GeoPandas. This skill targets professional workflows involving planar vector data, emphasizing rigorous data provenance, coordinate reference system (CRS) management, and complex spatial operations. It details necessary safety contracts, correctness gates, and best practices for handling sensitive geographic information in reproducible Python environments.

This skill is designed to create editable, macro-free scientific posters in PowerPoint (.pptx) format for academic and conference use. It enforces rigorous content auditing, requiring authors to provide all assets and data locally. Use it when absolute control over physical dimensions, print readiness, provenance, and security (e.g., no macros or external APIs) is mandatory.