Skill UI

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

The API Design Reviewer provides comprehensive automated analysis of REST API designs using OpenAPI specifications. It performs linting for convention adherence, detects breaking changes between versions, and generates a design scorecard across consistency, security, and usability. Ideal for reviewing PRs, auditing API migrations, or establishing robust development standards.

A comprehensive security analysis tool for cryptocurrency wallets. It meticulously scans ERC20 token approvals, analyzes transaction patterns, and calculates a weighted security risk score (0-100). Use this skill to assess your wallet's overall security posture, identify risky approvals, and receive actionable recommendations to mitigate potential vulnerabilities.

A comprehensive security analysis tool for cryptocurrency wallets. It meticulously scans ERC20 token approvals, analyzes transaction patterns, and calculates a weighted security risk score (0-100). Use this skill to assess your wallet's overall security posture, identify risky approvals, and receive actionable recommendations to mitigate potential vulnerabilities.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

This framework provides comprehensive compliance and security auditing for Cursor IDE usage. It covers major regulations like SOC 2, GDPR, and HIPAA, guiding users through detailed checklists, evidence collection, and remediation steps. It is essential for enterprise teams requiring robust data governance and adherence to strict industry standards.

A powerful tool for comprehensive, offline dependency auditing across 8+ programming ecosystems (e.g., Node, Python, Go, Rust). It identifies critical CVE vulnerabilities, license conflicts, and calculates safe upgrade paths, making it essential for pre-release security checks, legal compliance reviews, and major version migrations.

A comprehensive checklist for ensuring any Evernote integration is production-ready. It covers critical operational aspects including API key management, security hardening (encryption, sanitization), rate limit handling, robust monitoring setup, and post-deployment verification steps. Use this guide when deploying or auditing a live Evernote connection.