Skill UI

This skill provides enterprise-grade Role-Based Access Control (RBAC) patterns specifically for Veeva Vault deployments in regulated environments. It guides developers on implementing advanced features while maintaining strict compliance standards. Key considerations include validating API changes against compliance requirements, utilizing VQL for efficient data retrieval, and managing security profiles for robust access control.

Provides an enterprise-grade framework for managing Webflow access control using OAuth 2.0 and scope-based Role-Based Access Control (RBAC). This system enforces the principle of least privilege by mapping specific user roles (e.g., Viewer, Editor, Admin) to granular Webflow scopes. Key features include per-site token isolation and robust permission checking middleware, significantly enhancing security for complex SaaS integrations.

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

A specialized skill for building and auditing Kubernetes Operators. It focuses on the core principle of the declarative reconcile loop, helping developers identify and fix common operational bugs such as status drift, missing finalizers, and incorrect RBAC. Includes tools to validate CRD specifications, lint controller code, and audit capability levels against industry best practices.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.

Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess, tracing which subjects can escalate toward cluster-admin. Use when reviewing who can escalate privileges in a cluster, hunting exploitable RoleBindings during an authorized review, or validating least privilege after an RBAC change.

A comprehensive guide covering essential security best practices for Django applications. It details how to implement robust authentication, granular authorization (RBAC), and crucial security settings like CSRF/XSS protection, HSTS, and secure environment configuration to prevent common vulnerabilities in production deployments.

A comprehensive guide to implementing best practices for resilient, production-grade Kubernetes deployments. This skill provides runnable YAML patterns for Deployments, Services, Ingress, and Jobs, alongside critical advice on resource management, RBAC, advanced probes (liveness/readiness/startup), and debugging commands for maximum stability.

This comprehensive guide covers security best practices for building robust Quarkus applications. It details how to implement secure authentication (JWT, OIDC), role-based authorization (RBAC), robust input validation (Bean Validation), and advanced protection against vulnerabilities like SQL injection and CSRF. Essential for securing resource access and managing application secrets.

A comprehensive, authorized methodology for security assessments covering cloud platforms, container runtimes, and Kubernetes clusters. It guides users through checking critical areas such as IAM privilege escalation, metadata SSRF, container escape paths, and granular RBAC misconfigurations, ensuring testing is systematic and non-destructive.

This skill is designed for deep security and behavioral analysis within the Kubernetes control plane. It specializes in tracing complex interactions, including RBAC edge cases, service-account trust paths, admission webhook behavior, resource mutation, and cluster-level state drift. Use it when diagnosing why live workloads differ from manifest declarations, or when investigating cluster-wide permission issues.