Skill UI

Implement AWS Config rules for continuous compliance monitoring of AWS resources, align managed and custom rules with CIS/PCI DSS, activate SSM Automation remediation, and aggregate multi-account compliance data.

Implements runtime protection for EC2/GCE workloads using boto3 and Google Cloud APIs; monitors processes, files, networks, and resource usage to detect cryptomining, reverse shells, and unauthorized binaries during security deployments.

Use Calico CNI and calicoctl to audit, create, and validate Kubernetes NetworkPolicy and GlobalNetworkPolicy resources, enforcing egress restrictions, namespace isolation, and zero-trust pod-to-pod segmentation for container workloads.

Implements zero trust device posture assessment by ingesting endpoint health signals from CrowdStrike ZTA, Microsoft Intune, and Jamf to enforce compliance via conditional access policies before granting access to resources.

Implement GCP Organization Policy constraints to enforce security guardrails across an entire resource hierarchy, restricting risky configurations, enforcing encryption, and auditing compliance programmatically at organization, folder, and project scopes.

Implement HashiCorp Boundary to provide identity-aware zero trust access to infrastructure resources, tying into Vault for dynamic credential brokering, session recording, and hierarchical scopes so operators deliver just-in-time access without exposing secrets.

Provides production-ready Laravel architecture patterns covering routing, controllers, service layers, Eloquent models, queues, events, caching, and API resources to keep web apps and APIs scalable and maintainable.

Guides building MCP servers with Node/TypeScript SDKs, covering registration of tools, resources, prompts, and choosing stdio or streaming HTTP transports, plus Zod validation and best practices.

Use ScoutSuite to enumerate AWS accounts, capture resource configurations, surface misconfigurations, and create interactive reports so audit, incident response, or compliance teams can prioritize remediation efforts.

Guide for executing cloud-native incident containment across AWS, Azure, and GCP, covering credential revocation, compromised resource isolation, forensic snapshots, and tightened network controls to halt lateral movement during response.

This tool is designed for security professionals to test for Server-Side Request Forgery (SSRF) vulnerabilities. It systematically probes user-controllable URL parameters to identify access to internal network services, cloud metadata endpoints (AWS/GCP/Azure), and restricted local resources. It supports various payload techniques, including protocol handlers (gopher, file), IP encoding, and DNS rebinding, making it essential for thorough security assessments and penetration testing.

Performs static Windows PE malware triage with PEStudio, examining headers, sections, imports, strings, and resources to spot packing, anti-analysis traits, and IOC clues before deciding if sandbox execution is warranted.