Skill UI

Implements API Security Posture Management (API-SPM) to continuously discover, classify, and risk-score all APIs (internal, external, partner, shadow). It aggregates security findings from DAST, SAST, SCA, and runtime monitoring to provide a unified, continuous view of API risk and compliance across the enterprise.

This skill implements comprehensive API security testing using the 42Crunch platform. It combines static analysis (API Audit) on OpenAPI definitions, dynamic vulnerability scanning (API Conformance Scan) against running APIs, and runtime threat protection. Ideal for integrating OWASP API Security Top 10 checks into CI/CD pipelines and IDEs, enabling 'shift-left' security practices.

This utility implements comprehensive Cloud Workload Protection (CWPP) by monitoring compute workloads on cloud instances (EC2/GCE). It provides runtime security controls, detecting process anomalies, unauthorized binary execution, cryptomining activity, and suspicious network connections using AWS and Google APIs. Ideal for establishing robust security postures and meeting compliance requirements.

Learn how to implement Runtime Application Self-Protection (RASP) agents for Java and Python web applications. This skill covers deploying OpenRASP, detecting OWASP Top 10 attacks (SQLi, XSS, RCE), configuring security policies, and integrating real-time security alerts with SIEM platforms for comprehensive defense in depth.

Tetragon utilizes eBPF technology to provide deep, low-overhead security observability and runtime enforcement directly within Kubernetes clusters. It monitors system calls, process execution, file access, and network connections at the kernel level, allowing users to detect or block dangerous activities like container escapes or privilege escalation, ensuring robust cluster security and compliance.

This skill guides users on performing deep runtime threat detection and forensics in cloud-native environments using Falco. It leverages Falco YAML rules to monitor syscalls, detecting critical security events such as shell spawning, file tampering (e.g., /etc/shadow), network anomalies, and privilege escalation within containers and Kubernetes clusters. Ideal for incident response, security auditing, and validating container runtime security controls.

This tool automates the security audit of Docker environments using the open-source CIS Docker Benchmark. It assesses host configuration, daemon settings, container images, and runtime controls, generating a comprehensive pass/fail/warn compliance report. It is essential for ensuring CIS compliance, validating security hardening, and automating scheduled container security testing.

This skill enables sophisticated runtime dynamic analysis of Android applications using industry-standard tools like Frida and Objection. It is used to observe application behavior, intercept API calls, monitor network traffic, and bypass client-side security protections (e.g., root detection, anti-debugging). Essential for identifying vulnerabilities and analyzing obfuscated code that static analysis cannot reach.

This sophisticated tool automates the security review of serverless functions across major cloud providers, including AWS Lambda, Azure Functions, and GCP Cloud Functions. It systematically identifies critical misconfigurations such as overly permissive IAM execution roles (wildcard actions), hardcoded secrets in environment variables, and potential lack of runtime protections. Ideal for pre-production auditing and compliance checks.

A comprehensive guide for reversing and analyzing .NET malware samples. Learn the full workflow, including identifying .NET assemblies, using de4dot to deobfuscate code protected by tools like ConfuserEx or SmartAssembly, and loading the cleaned code into dnSpy. This skill is essential for extracting hardcoded C2 configurations, encryption keys, and credentials, and debugging runtime behaviors of complex malware.

A comprehensive guide to securing serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions). It covers critical security aspects including enforcing least-privilege IAM roles, integrating secrets management, vulnerability scanning of dependencies, input validation, and implementing runtime monitoring for robust DevSecOps practices.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.