Skill UI

AddressSanitizer accelerates fuzz testing by instrumenting C/C++ and unsafe Rust code to detect buffer overflows, use-after-free, and related memory corruption bugs at runtime, with configurable ASAN_OPTIONS for verbosity, abort behavior, and leak control.

NVIDIA’s NeMo Guardrails adds runtime safety rails to LLM apps, covering jailbreak detection, hallucination and fact-checking, PII filtering, and toxicity checks via Colang 2.0 rules and integrations for production use on T4 GPUs.

This comprehensive guide provides a step-by-step workflow for safely upgrading a full-stack application deployed on Vercel. It covers migrating Vercel CLI versions, updating Node.js runtimes, and handling major Next.js framework version changes. The guide emphasizes breaking change detection, schema updates, and implementing robust preview testing and rollback strategies for a smooth deployment process.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

This guide teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous, comprehensive threat detection across entire AWS accounts and workloads. It covers enabling protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting various finding severity levels, and building robust, automated incident response playbooks using EventBridge and AWS Lambda for immediate containment actions.

Tetragon, a CNCF project under Cilium, provides advanced, kernel-level runtime security observability and policy enforcement in Kubernetes clusters. By utilizing eBPF, it monitors process execution, file access, and network connections with minimal overhead, enabling detection and prevention of container escapes, unauthorized access, and suspicious activity.

This skill guides users on performing deep runtime threat detection and forensics in cloud-native environments using Falco. It leverages Falco YAML rules to monitor syscalls, detecting critical security events such as shell spawning, file tampering (e.g., /etc/shadow), network anomalies, and privilege escalation within containers and Kubernetes clusters. Ideal for incident response, security auditing, and validating container runtime security controls.

This skill enables sophisticated runtime dynamic analysis of Android applications using industry-standard tools like Frida and Objection. It is used to observe application behavior, intercept API calls, monitor network traffic, and bypass client-side security protections (e.g., root detection, anti-debugging). Essential for identifying vulnerabilities and analyzing obfuscated code that static analysis cannot reach.

This skill provides high-performance, real-time object detection using the Intel OpenVINO runtime. It operates via a Docker container, ensuring cross-platform compatibility. Supports detection across various Intel accelerators (NCS2, iGPU, Arc GPU) and CPUs. Users can customize parameters like confidence threshold, target classes, processing FPS, and model precision to optimize performance for specific hardware and accuracy needs.

Falco is a powerful CNCF project for real-time runtime security monitoring. This guide teaches authors how to write and deploy custom detection rules using Falco's robust YAML rule engine and modern eBPF driver. It is designed to detect critical threats such as container escapes, namespace manipulation, privileged mounts, and anomalous syscalls in Kubernetes and Docker environments, significantly hardening the overall container security posture.