Skill UI

Guides security teams through hands-on Kubernetes penetration testing—covering reconnaissance, KPI scanning (kube-hunter, Kubescape, kube-bench), RBAC exploitation, secret extraction, and compliance checks to validate cluster resilience.

Use Trivy to scan Docker and OCI images for OS/library CVEs, secrets, misconfigurations, licenses, and SBOM data; integrates with CI/CD pipelines and exports SARIF/JSON/CycloneDX for policy enforcement.

Harden serverless compute on AWS Lambda, Azure Functions, and Google Cloud Functions by enforcing least-privilege IAM roles, moving secrets into vaults, scanning dependencies, validating inputs, securing function URLs, and monitoring runtimes so injections, credential theft, and supply-chain threats are caught before deployment.

Provides offensive security testing methodology, tooling guidance, and workflows for scanning web apps, APIs, dependencies, secrets, and infrastructure to uncover vulnerabilities before attackers exploit them.

A comprehensive guide detailing how to configure and manage GitHub's secret scanning feature. This skill covers enabling Secret Protection, setting up push protection to block leaked credentials before they reach the repository, defining custom regex patterns, and providing workflows for triaging alerts and resolving blocked pushes (including using git rebase or bypassing protections). Essential for maintaining secure code repositories and complying with security standards.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

A comprehensive guide to setting up CI/CD pipelines for Adobe API integrations. It covers secure OAuth credential management, unit testing, secret pattern scanning, and rigorous integration testing within GitHub Actions. Essential for maintaining high code quality in Adobe-integrated SaaS products.

A comprehensive guide for implementing robust policy enforcement and security guardrails in HubSpot integrations. This methodology covers secret scanning within CI/CD pipelines to prevent token leaks, utilizes ESLint rules for enforcing modern authentication practices, and leverages TypeScript for compile-time and runtime checks. Use this when setting up secure, scalable, and compliant codebases for HubSpot APIs.