Skill UI

This comprehensive checklist guides the secure and compliant deployment of OpenEvidence, a clinical decision support system. It covers critical requirements for handling Protected Health Information (PHI), including HIPAA-grade security, robust API integration best practices, mandatory monitoring setup, and resilience testing. Use this guide to ensure your healthcare-adjacent system meets the highest standards of compliance and reliability.

Execute controlled chaos experiments to proactively test system resilience, fault tolerance, and recovery capabilities. This toolkit simulates real-world failures, such as network latency, service crashes, resource exhaustion, and dependency outages, ensuring that microservices degrade gracefully and recover automatically. It is essential for modern distributed systems validation.

A comprehensive security assessment guide and script to test API rate limit vulnerabilities. It evaluates if an API's security controls can be bypassed using advanced techniques such as IP spoofing (manipulating X-Forwarded-For headers), HTTP method variations, and endpoint path traversal. Designed for penetration testing, it helps assess resilience against brute-force or resource exhaustion attacks, aligning with OWASP API Top 10 findings.

This skill demonstrates how to craft and inject custom, malformed, or spoofed network packets using tools like Scapy and hping3. It is designed for authorized cybersecurity assessments to rigorously test firewall rules, Intrusion Detection/Prevention Systems (IDS/IPS) signatures, anti-spoofing controls, and overall network stack resilience against protocol anomalies and fragmentation attacks. Use only in controlled, authorized environments.

A comprehensive security tool designed to assess the resilience of OAuth 2.0 and OpenID Connect (OIDC) implementations. It probes for critical misconfigurations and security flaws, including authorization code interception, redirect URI manipulation (open redirects), CSRF vulnerabilities, scope escalation, token leakage, and PKCE bypass. Essential for penetration testing of Single Sign-On (SSO) systems and API security.

This skill provides a comprehensive framework for simulating and testing disaster recovery plans against ransomware threats. It guides users through measuring Recovery Time Objective (RTO) and Recovery Point Objective (RPO), validating clean backup restores, and hardening security controls to ensure organizational resilience. It is designed for tabletop exercises and compliance auditing, not for active incident response.

This comprehensive guide details how to build a robust, ransomware-resilient backup architecture using the extended 3-2-1-1-0 methodology. It covers defining Recovery Point/Time Objectives (RPO/RTO), configuring multiple isolated copies (local, offsite, immutable/air-gapped), strictly isolating backup credentials, and automating regular restore testing. Essential for organizations requiring high cyber resilience against modern threats.

This skill covers implementing service mesh patterns for AI inference traffic management using Istio or Linkerd. It includes configuring mTLS for security, setting up authorization policies for service accounts, managing egress for model endpoints, and implementing traffic splitting for canary releases and A/B testing. It ensures cross-cluster resilience and protects GPU-backed services from cascading failures without modifying application code.

This skill enables structured AI red team exercises to evaluate model resilience against jailbreaks, data exfiltration, and harmful outputs. It helps identify exploitable failure modes before attackers do, suitable for new LLM features, third-party model evaluation, and compliance audits. Includes adversarial prompt libraries and automated testing scripts for security assessments.

Develop and maintain business continuity capabilities including Business Impact Analysis, communication plans, recovery procedures, and testing schedules for organizational resilience. Use this skill when building formal BCPs, conducting BIAs to prioritize recovery, establishing crisis communication, defining recovery for critical processes, scheduling BCP exercises, and meeting compliance requirements like SOC 2 or ISO 27001.