Skill UI

Implements enterprise-grade Role-Based Access Control (RBAC) for Apollo.io API integrations. This skill is essential for managing team permissions, ensuring data segregation, and implementing robust security controls by proxying API calls. It defines granular roles (Viewer, Analyst, Admin) and maps specific API operations to required permissions, preventing all-or-nothing key usage.

This guide details the comprehensive setup of Granola for large-scale, multi-departmental enterprise environments. It covers creating isolated workspaces (e.g., Engineering, HR, Sales), integrating Identity Providers using SSO/SCIM, and implementing granular compliance controls (data retention, external sharing, MFA) to ensure data security and departmental autonomy.

This comprehensive guide outlines best practices for securing Granola meeting data. It covers critical compliance standards, including SOC 2 and GDPR, and details technical controls such as AES-256 encryption, TLS 1.3 transmission, and robust configuration of SSO and data retention policies for enterprise use.

This expert simulates a compliance expert, specializing in regulatory requirements for software systems, including GDPR, HIPAA, SOC2, and PCI-DSS. It performs comprehensive audits, identifies compliance gaps, and generates actionable implementation plans, technical controls, and policy templates to ensure adherence to industry standards.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

This guide details how to configure Windsurf for professional enterprise deployment, covering critical security and governance features. Key areas include setting up SSO/SAML authentication, defining role-based permissions (Owner, Admin, Member), establishing organization-wide AI policies and data controls, managing user seats, and implementing comprehensive audit trails for compliance.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This skill analyzes DNS query logs to detect sophisticated threats such as data exfiltration via DNS tunneling, Domain Generation Algorithm (DGA) usage, and covert Command and Control (C2) channels. It utilizes advanced techniques like entropy analysis, query volume anomaly detection, and subdomain length analysis within SIEM platforms, helping SOC teams identify threats that bypass traditional network security controls.

This comprehensive guide details how to deploy and configure a resilient Command and Control (C2) infrastructure using the advanced Sliver framework. It covers setting up multi-protocol listeners (HTTPS, mTLS, DNS, WireGuard), implementing complex redirectors, domain fronting, and establishing operational security controls for professional red team engagements and advanced security assessments.

This comprehensive skill guides users through designing and executing advanced social engineering penetration tests. It covers simulating real-world attacks, including phishing (email), vishing (voice), smishing (SMS), and physical pretexting. The goal is to measure an organization's human security resilience, identify training gaps, and test security controls across multiple vectors using tools like GoPhish and SET.

This guide outlines the comprehensive process for planning and executing authorized vishing (voice phishing) pretext calls. Used in red teaming exercises, it assesses employee susceptibility to social engineering attacks and evaluates the effectiveness of existing security awareness controls. Key steps include OSINT research, developing believable pretexts (e.g., IT helpdesk impersonation), structured call execution, and collecting detailed metrics.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.