Skill UI

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

Automates cloud security posture assistance within the Security Advanced domain, guiding practitioners through best practices, compliance checks, threat modeling, and prod-ready configurations whenever they mention cloud security posture.

Assists container security auditors within the Security Advanced domain by auto-activating when key terms appear, walking through best-practice guidance, producing production-ready code/configurations, and validating results against compliance and threat-modeling standards.

Automates HIPAA audit helper workflows within Security Advanced, offering guided best practices, production-ready configurations, and compliance validation for penetration testing and threat modeling scenarios.

Automates IAM policy reviewer workflows within the Security Advanced domain, providing guided best practices, production-ready configurations, and validation so teams can handle compliance and threat modeling requests with confidence.

Provides automated guidance for Kubernetes RBAC analyzer tasks within Security Advanced workflows, covering best practices, production-ready configurations, compliance checks, and threat modeling steps whenever the analyzer is mentioned.

Automates penetration test planning tasks by guiding workflows, validating outputs, and generating production-ready artifacts aligned with compliance and threat-modeling needs.

Security workflow that guides from threat modeling through secure design, authentication and input validation, header hardening, encryption, and OWASP defenses for production services.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

This skill generates a comprehensive, minimal, and enforceable security policy document (Blue Book) for applications handling sensitive data. It structures requirements using MUST/SHOULD/CAN language, explicitly defining assumptions, scope, threat models, and security gates. It is essential for establishing clear security guardrails and ensuring compliance early in the development lifecycle.

Automates security policy creation within Security Advanced workflows by offering step-by-step guidance, best-practice templates, and validation of outputs for compliance, penetration testing, and threat modeling use cases.