Skill UI

This comprehensive checklist details advanced methods for bypassing Web Application Firewalls (WAFs) during security assessments. Techniques covered include encoding bypass (URL, Unicode, double encoding), HTTP header manipulation, IP rotation, payload obfuscation, and fingerprinting specific WAF vendors (e.g., Cloudflare, Akamai). It is essential for penetration testers evaluating the robustness of web defenses.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.

This guide outlines comprehensive security best practices for integrating with Palantir Foundry. It covers secure credential storage (using secrets managers like AWS Secrets Manager or Vault), implementing the Principle of Least Privilege via OAuth2 scopes, and establishing robust credential rotation procedures. Use this when securing production environments, setting up new data pipelines, or auditing existing API access controls.

This guide details best practices for securing Persona identity verification implementations. It covers critical security measures such as API key rotation, webhook HMAC verification, encrypting Personally Identifiable Information (PII) at rest, and maintaining comprehensive audit logs. Use this when integrating Persona into a production system requiring high data security and compliance.

This comprehensive guide details advanced strategies for managing time-series data and data retention in vector databases (like Qdrant). It is designed for scenarios where only recent data is relevant (e.g., social media feeds, news articles). Three core methods are presented: Shard Rotation (recommended for natural time boundaries), Collection Rotation (for per-period configuration needs), and Filter-and-Delete (for simple cleanup). The guide also covers hot/cold tiering to optimize performance.

This guide details essential security best practices for Snowflake data warehouses. It covers implementing network policies, managing key rotation, enabling Multi-Factor Authentication (MFA), and securing credentials using secret managers. Use this comprehensive resource to audit security configurations, restrict network access, and enforce least-privilege access within your Snowflake environment.

This guide details comprehensive security best practices for Webflow Data API v2. It covers crucial topics such as selecting the correct token type, implementing least privilege access scopes, secure secret rotation, and verifying webhook signatures. Use this knowledge when building or auditing Webflow integrations to ensure robust data security and system reliability.

This skill generates comprehensive, single-page engineering runbooks. It structures critical operational information, including service overviews, alert response tables, common deployment procedures, on-call rotations, and incident response checklists. It is essential for DevOps, SRE, and engineering teams creating standardized operational documentation (Ops Docs).

A detailed technical workflow for inspecting complex 3D animation, rigging, and motion states within Blender. This skill moves beyond visual inspection by extracting structured data—such as bone transformations, world-space bounding boxes, ground contacts, and axis conventions—to accurately diagnose issues like foot sliding, rotation errors, or retargeting mismatches in professional animation pipelines.

A comprehensive guide for designing and implementing 3D user interfaces across web, mobile, and cross-platform environments. Learn core principles like perspective transformations, Z-axis depth, and interactive rotation to build visually stunning, spatially immersive, and highly engaging product experiences.

A comprehensive guide to hardening AWS Identity and Access Management (IAM) configurations. This skill enforces least-privilege access by utilizing IAM Access Analyzer, setting permission boundaries, scoping policies, and managing credential rotation. It is crucial for reducing the blast radius of compromised accounts and passing compliance audits (e.g., SOC 2, PCI-DSS).

This skill guides the implementation of dynamic secrets using HashiCorp Vault. It focuses on generating short-lived, ephemeral credentials for services like databases (PostgreSQL, MySQL), AWS IAM, and PKI certificates. By automating credential generation, lease management, and rotation, it eliminates the risk associated with storing long-lived static secrets, ensuring compliance with zero-trust security models (PCI-DSS, NIST).