Skill UI

A comprehensive, step-by-step guide for security professionals to perform deep-dive malware analysis. It covers methodologies for static analysis (disassemblers, imports), dynamic execution (sandboxing, monitoring), identifying Indicators of Compromise (IOCs), and structuring professional threat reports. Essential for incident response and threat intelligence.

This provides a local development loop for integrating the OpenEvidence clinical decision support API. Developers can build health-tech tools and quickly iterate using mock evidence queries, citation responses, and clinical summaries. It supports toggling between mock mode for rapid development and sandbox mode for validation against the real platform, ensuring development uses de-identified data.

Deploy projects or websites instantly to Vercel using preview mode, with fallback scripts handling packaging and authentication, and guidance for escalated network access when sandboxing blocks outbound requests.

This skill thoroughly inspects and validates Vertex AI Agent Engine deployments. It assesses critical components such as the Code Execution Sandbox, Memory Bank, A2A protocol compliance, security posture, and performance metrics. The tool generates weighted production-readiness scores (0-100%) and provides detailed, actionable recommendations to ensure the deployment is robust, secure, and ready for production use.

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.

Generates minimal macOS Seatbelt sandbox profiles with allowlist-based resource rules so apps can be isolated by permissions, useful for restricting file, network, and IPC access when defending against high-risk execution or supply chain threats.

This skill automates the creation of isolated, pre-configured development containers (devcontainers). It scans the project structure to detect supported languages (Python, Node.js, Rust, Go) and intelligently generates the necessary configuration files, VS Code extensions, and setup scripts. It ensures all required tools are installed in a sandboxed environment, making it ideal for starting new multi-language projects or needing consistent, reproducible development workspaces.

This infrastructure provides a robust solution for running powerful AI agents in remote, sandboxed environments. It overcomes the limitations of local execution by ensuring unlimited concurrency, consistent environments, and collaborative features. Use this to build complex background coding agents, multi-client interfaces (e.g., Slack, Web), or scale agent workloads far beyond local machine constraints.

A comprehensive guide for building robust, production-grade desktop applications using Electron. This skill covers advanced topics including multi-process architecture, mandatory security hardening (contextIsolation, sandbox), secure IPC communication, and best practices for packaging, code signing, and implementing auto-update features.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

A comprehensive guide to utilizing Cuckoo Sandbox for deep dynamic analysis of suspicious malware samples. This workflow walks through sample submission, real-time monitoring, and programmatic extraction of behavioral indicators, including process activity, network communications (DNS, HTTP), file system changes, and registry modifications, essential for threat intelligence and IOC extraction.

Analyzes behavioral reports from security sandboxes (Cuckoo, AnyRun) to detect advanced anti-analysis and evasion techniques. It specifically identifies indicators such as timing checks, hypervisor artifact queries, user interaction patterns, and environment fingerprinting. This tool is essential for threat hunting, enhancing detection rules, and conducting deep malware triage.