Skill UI

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

Guides multi-axis reviews before merging, checking correctness, readability, architecture, security, and performance while enforcing concise change sizing and descriptive commit messaging to keep PR history clear.

A comprehensive code review tool designed for C#/.NET projects. It evaluates the implementation of key design patterns (Command, Factory, Repository) and adherence to SOLID principles. The review covers architecture, best practices (async/await, logging), security, testability, and clean code principles, providing actionable recommendations for improvement.

This comprehensive guide outlines essential best practices and structural checks for developing robust Salesforce Apex code. It covers critical areas such as preventing governor limit exceptions (e.g., bulk safety), enforcing security (CRUD/FLS), preventing SOQL injection, adhering to sharing models, and implementing modern Apex idioms. It also mandates rigorous testing strategies (Positive, Negative, Bulk) and proper trigger architecture.

A comprehensive tool that analyzes existing codebases to generate detailed, definitive architectural blueprints. It automatically detects technology stacks, identifies architectural patterns (e.g., Microservices, Clean Architecture), and documents implementation details, including dependency flow, cross-cutting concerns (security, logging), and data models. This ensures architectural consistency, aids in onboarding new team members, and guides future development efforts.

This guide details how to implement robust Role-Based Access Control (RBAC) for Flexport API integrations. It addresses enterprise needs by allocating scoped API keys and managing permissions at an application layer. Users can define specific roles (Viewer, Operator, Finance, Admin) with granular permissions, ensuring that different user roles can only access necessary endpoints, thereby enhancing security and supporting multi-tenant architectures.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This skill provides a deep dive into the architecture of low-level keyloggers. It covers techniques such as kernel driver hooks, using WH_KEYBOARD_LL, ETW-based input capture, and analyzing user-mode vs. kernel-mode approaches. Use this methodology to understand input capture mechanisms, research EDR evasion methods, or analyze malware architecture for advanced security threat detection.

This skill provides a comprehensive checklist and detailed methodology for detecting HTTP Request Smuggling vulnerabilities. It covers various desynchronization types (CL.TE, TE.CL, TE.TE), including HTTP/2 and modern variants. Use this when penetration testing multi-server architectures, proxies, or load balancers to identify potential security bypasses, unauthorized access, or cache poisoning risks.

This advanced skill explores offensive reconnaissance techniques focused on defeating modern operating system security boundaries and mitigations. Topics include kernel/user boundary manipulation, sandbox escapes (AppContainer, LPAC), COM/RPC boundary exploitation, hypervisor interactions, and various integrity level bypassing methods. It is essential for planning advanced privilege escalation paths and understanding deep Windows security architecture, including AMSI, WDAC, and ETW manipulation.

This skill provides a comprehensive Python guide to building a production-ready Virtual Cloud Network (VCN) on Oracle Cloud Infrastructure (OCI). It details the entire process from scratch, including creating the VCN, setting up Internet and NAT Gateways, configuring route tables, and defining Network Security Groups (NSGs). This is essential for engineers needing to provision complex, secure, and highly functional network architectures for development or production use.

This guide provides a comprehensive reference architecture for building production-ready, enterprise-grade applications on Palantir Foundry. It covers the entire data lifecycle, detailing best practices for the standard data pipeline (Raw > Clean > Model), Ontology design, external API integration patterns, and robust multi-layered security models. Use it when designing, planning, or optimizing complex data infrastructure within Foundry.