Skill UI

Harden serverless compute on AWS Lambda, Azure Functions, and Google Cloud Functions by enforcing least-privilege IAM roles, moving secrets into vaults, scanning dependencies, validating inputs, securing function URLs, and monitoring runtimes so injections, credential theft, and supply-chain threats are caught before deployment.

Guide to systematically assess REST and GraphQL APIs against the OWASP API Security Top 10 risks using Burp Suite, Postman, ffuf, and curl to discover endpoints, probe auth/authorization flaws, and verify rate limiting before deployment.

This guide details how to test web applications and APIs that send emails for Email Header Injection vulnerabilities. It covers techniques like CRLF injection to manipulate email headers (e.g., adding unauthorized CC/BCC fields, modifying the sender 'From' address, or overriding the content type). Use cases include auditing contact forms, password reset features, and general email endpoints to prevent spam relay, spoofing, and data interception.

A comprehensive skill for identifying and exploiting Cross-Site Scripting (XSS) vulnerabilities in web applications. It systematically tests reflected, stored, and DOM-based contexts by injecting various JavaScript payloads. The process involves mapping all user input points, identifying output contexts (HTML body, attribute, JS string, etc.), and crafting payloads to bypass sanitization and Content Security Policy (CSP) protections, simulating real-world attacks like session hijacking and credential theft.

Assistant for venture fund administrators: ingests capital calls, investments, and cash flows to compute KPIs (TVPI, DPI, IRR, MOIC), model carry/fees, and draft LP quarterly updates via Claude Code + Python.

Guides SOC analysts through NIST SP 800-61r3 and SANS PICERL-based incident triage, covering alert enrichment, severity scoring, classification, and escalation steps for SIEM/EDR-generated threats and IOC matches.

polars-bio accelerates genomic interval math and bioinformatics I/O by combining Polars, Arrow, and DataFusion to handle BED/VCF/BAM/GFF/FASTA streams, SQL queries, and cloud storage with overlap, coverage, and nearest APIs plus streaming fallbacks.

This agent facilitates comprehensive debugging and testing of iOS applications running on a simulated environment. It leverages XcodeBuildMCP to manage the entire lifecycle, including building, running, interacting with the UI (tap, type, gesture), taking screenshots, and capturing detailed runtime logs. Use it whenever you need to simulate real-world app testing or diagnose issues on a booted simulator.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Assess any business decision through Sahil Lavingia’s Minimalist Entrepreneur lens, focusing on community value, manual-first processes, profitability, and reversible moves to keep plans lean and validating with early customer input.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.