Skill UI

This skill implements a simplified version of the Signal Protocol, focusing on robust end-to-end encryption (E2EE) for messaging applications. It covers critical cryptographic components including X3DH key agreement, the Double Ratchet algorithm for continuous key management, and AES-256-GCM for message encryption. The implementation ensures forward secrecy, meaning that compromising a current key does not reveal past messages. Use this when designing, building, or evaluating the security architecture of a messaging service to guarantee that only communicating parties can read the messages.

This skill guide details the implementation of envelope encryption using AWS Key Management Service (KMS). It outlines the secure process of using a Data Encryption Key (DEK) to encrypt data locally, and subsequently protecting that DEK with a KMS-managed Key Encryption Key (KEK). This method is crucial for encrypting large data volumes on AWS, significantly reducing direct KMS API calls, improving performance, and maintaining compliance with strict security standards.

This skill provides a comprehensive framework for performing authorized penetration testing on Google Cloud Platform (GCP). It uses specialized tools like GCPBucketBrute to enumerate publicly accessible storage buckets and audits IAM policies to identify overly permissive role bindings. The process includes checking service account keys and mapping potential privilege escalation paths, generating actionable, risk-scored reports for robust cloud security posture management.

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

A comprehensive guide and toolkit for advanced network reconnaissance using Nmap. It covers sophisticated techniques including service version detection, vulnerability scanning via Nmap Scripting Engine (NSE), firewall evasion methods (e.g., fragmentation, decoy addressing), and structured output parsing for integration into vulnerability management pipelines. Essential for authorized penetration testing.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

A comprehensive, type-safe in-memory caching library for Go, designed for advanced system architecture. It supports nine sophisticated eviction algorithms (like W-TinyLFU, LRU, LFU, ARC) to optimize cache hit rates based on specific access patterns. Key features include TTL management, loader chains for read-through caching (with singleflight deduplication), sharding, and Prometheus metrics. Ideal for high-frequency services needing to reduce database load and latency.

A comprehensive guide for deploying, configuring, and maintaining the OpenViking server in production environments. It covers service configuration management, environment setup using `uv` for virtual environments, reliable startup procedures using `nohup`, graceful shutdown methods, and critical data cleanup workflows. This resource is essential for DevOps engineers and system administrators managing OpenViking services.

This service provides a centralized, common API server backend for the entire KubeSphere WizTelemetry Observability Platform. It unifies backend functionalities for core observability components including Logging, Auditing, Events, Tracing, and Notifications, enabling global monitoring and streamlined platform management within Kubernetes environments. Use it when installing or configuring the core telemetry platform.

Provides expert consultation on ITIL 4 and the emerging ITIL 5 Digital Product & Service Management (DPSM) framework. This skill guides the integration of AI governance, ESG sustainability principles, and product-centric thinking into modern, high-velocity IT service value streams. Ideal for optimizing IT operations and achieving continuous compliance.

This skill provides a comprehensive guide and implementation for deploying a containerized AppFolio property management integration service using Docker. It covers building a production-ready image, configuring environment variables for multi-property setups, implementing health checks for API connectivity, and executing zero-downtime rolling updates across your property portfolio.

This guide provides comprehensive instructions for setting up the AssemblyAI SDK in both Node.js and Python environments. It covers package installation, secure API key management using environment variables, and client initialization for utilizing transcription and streaming services.