Skill UI

Detect SQL injection weaknesses by running the sql-injection-detector plugin against codebases, identifying risky queries, and providing remediation guidance to secure applications.

Assesses AI/ML models and datasets for ethical risks, fairness concerns, and bias, generating reports and mitigation guidance via the ai-ethics-validator plugin whenever a user requests an ethics review or bias detection.

An AI-driven comprehensive health analysis system that integrates multi-dimensional datasets, including biometrics, lifestyle, and medical history. It excels at anomaly detection, predicting various health risks (e.g., CVD, Diabetes), providing personalized, evidence-based recommendations, and generating detailed, interactive health reports.

Leverages Monte Carlo-based simulation to spot potential software vulnerabilities by feeding randomized inputs into modules, tracking failure likelihoods, and highlighting risky code paths for security testing.

This script automates the detection and exploitation of Broken Function Level Authorization (BFLA) in APIs, following OWASP API Top 10 guidelines. It simulates low-privilege users attempting to access or modify restricted administrative endpoints (e.g., user management, system settings) using techniques like role switching, path manipulation, and parameter tampering. Essential for assessing vertical privilege escalation risks and verifying robust Role-Based Access Control (RBAC).

This skill provides a structured methodology for mitigating alert fatigue within Security Operations Centers (SOCs). It guides users through advanced techniques, including implementing Risk-Based Alerting (RBA) to replace high-volume, low-fidelity alerts with consolidated risk scores. It emphasizes quantifying alert quality by analyzing True Positive (TP) and False Positive (FP) rates, and systematically tuning detection rules to maintain analyst effectiveness.

A guide and implementation pattern for deploying Nozomi Networks Guardian sensors. This solution enables passive, non-disruptive monitoring of Operational Technology (OT) and Industrial Control Systems (ICS). It provides critical asset visibility, behavioral anomaly detection, protocol-aware monitoring, and vulnerability assessment, making it essential for building robust OT Security Operations Centers (SOCs) and ensuring compliance without risking live operations.

This skill guides Security Operations Center (SOC) teams through structured threat modeling using the MITRE ATT&CK framework. It enables mapping adversary Tactics, Techniques, and Procedures (TTPs) against organizational assets to identify critical detection coverage gaps, prioritize defensive investments, and improve overall security posture. Ideal for risk assessment, purple teaming, and compliance planning.

This skill provides a comprehensive guide to implementing robust USB device control policies. It restricts unauthorized removable media access to mitigate data exfiltration risks and prevent malware introduction via USB endpoints. Learn how to deploy granular policies using Group Policy Objects (GPO), Microsoft Intune, or advanced Endpoint Detection and Response (EDR) platforms to meet strict compliance standards.

This skill maps observed adversary behaviors, security alerts, and detection rules to the MITRE ATT&CK framework. It is essential for quantifying detection coverage, building ATT&CK heatmaps, tagging SIEM alerts, and prioritizing security controls based on known threat actor playbooks. Use it for comprehensive gap analysis and risk reporting.

A comprehensive security tool designed to simulate and detect critical software supply chain attacks. It identifies risks such as typosquatting via Levenshtein distance, dependency confusion against private registries, package integrity failures through SHA-256 hash verification, and known vulnerabilities using pip-audit. Essential for security auditing and assessing project dependency risk.

This benchmark evaluates Vision-Language Models (VLMs) on detecting potential safety hazards within indoor environments. It uses static camera frames, simulating real-world fixed security camera monitoring. The test covers 40 scenarios across 5 critical categories, including fire/smoke, electrical risks, trips/falls, child safety, and falling objects, providing a rigorous measure of VLM's practical safety inspection capability.