Skill UI

This sophisticated tool automates the security review of serverless functions across major cloud providers, including AWS Lambda, Azure Functions, and GCP Cloud Functions. It systematically identifies critical misconfigurations such as overly permissive IAM execution roles (wildcard actions), hardcoded secrets in environment variables, and potential lack of runtime protections. Ideal for pre-production auditing and compliance checks.

This skill provides comprehensive automation for managing GitHub workflows across the entire development lifecycle. It covers detailed issue triage, PR review status checks, CI/CD failure debugging, official release management, and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and streamlining team development processes.

Automates CI/CD pipeline setup, from linting and type checks to integration, E2E, security, and deployment stages, plus feedback loops for AI agents and preview deployments.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

This skill provides a comprehensive framework for securely inspecting and automating complex microscopy data workflows against OMERO.server. It utilizes omero-py and BlitzGateway to manage metadata, annotations, ROIs, tables, and raw files. Ideal for conducting scoped inventory, structured data export/import planning, and performing reviewed write operations while adhering to strict data security protocols.

A specialized tool for safely reading, validating, and exporting protocols.io data using current, official REST/MCP contracts. It provides a read-only, planned workflow to ensure data integrity, supporting complex scientific data extraction and workflow automation while strictly adhering to API governance and security best practices.

This comprehensive guide outlines essential security best practices for developing automation scripts that interact with Apple Notes on macOS. It covers critical areas such as managing TCC permissions, preventing data leakage, securely exporting content, and handling end-to-end encrypted notes (locked notes). Use this resource when building robust, secure, and compliant applications within the Apple ecosystem.

This skill integrates Aegis detection events directly into Home Assistant. By firing specific `aegis_detection` events, it allows users to automate actions in their smart home setup. Users can configure automations to automatically turn on lights, send notifications, or execute complex routines based on detected security activity. Requires HA credentials for secure connection.

A comprehensive guide detailing security best practices for integrating with Klaviyo. Learn how to manage private and public API keys, implement least-privilege scoping for different environments (Dev, Staging, Prod), and critically, how to verify webhook payloads using HMAC-SHA256 signatures. This guide is essential for developers building robust and secure marketing automation pipelines.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This comprehensive skill guide provides deep insight into Oracle Cloud Infrastructure (OCI) IAM policy syntax and best practices. It covers the privilege verb hierarchy (inspect, read, use, manage), the correct structure for policy statements, and common patterns for granting least-privilege access across various compartments. Use this when developing automation scripts, setting up complex access control policies, or performing security audits in OCI.

This guide provides essential security and implementation guidance for automating TechSmith's screen capture (Snagit) and video editing (Camtasia) workflows. It covers using the Snagit COM API, best practices for batch rendering with Camtasia CLI, and technical details for scripting in PowerShell and Python using pywin32. It also addresses common error handling scenarios like permission issues and file locking, ensuring robust automation.