Skill UI

A comprehensive guide to configuring and hardening SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end flow implementation, attribute mapping, advanced security controls like SHA-256 signatures and AES-256 encryption, and testing procedures for robust, enterprise-grade identity access management systems.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

This comprehensive guide details how to build a robust, ransomware-resilient backup architecture using the extended 3-2-1-1-0 methodology. It covers defining Recovery Point/Time Objectives (RPO/RTO), configuring multiple isolated copies (local, offsite, immutable/air-gapped), strictly isolating backup credentials, and automating regular restore testing. Essential for organizations requiring high cyber resilience against modern threats.

A sophisticated red-teaming tool for authorized security testing, simulating OAuth 2.0 device-code and illicit-consent phishing attacks against Microsoft Entra ID. It demonstrates how attackers can bypass MFA and steal access and refresh tokens by tricking victims into authorizing access via the genuine Microsoft login page. Essential for validating Conditional Access and token protection controls.

This guide details using the comprehensive AADInternals PowerShell toolkit for defensive validation of Microsoft Entra ID, Azure AD, and AD FS environments. It covers unauthenticated tenant reconnaissance, acquiring access tokens for multiple Microsoft APIs, and critically, testing for federation backdoors (Golden SAML) by simulating advanced attack techniques (MITRE T1606.002). It is designed for authorized red-team assessments to map external attack surfaces and validate identity infrastructure hardening.

A specialized, read-only tool designed for penetration testing and red teaming. It performs comprehensive enumeration across AWS and Azure, allowing users to build a deep situational awareness of an environment. Key functions include identifying internet-exposed endpoints, retrieving sensitive secrets, and mapping critical trust relationships (like sts:AssumeRole) necessary for planning lateral movement or privilege escalation.

GraphRunner is a powerful PowerShell toolset built on the Microsoft Graph API, designed for authorized red-teaming engagements against M365/Entra ID tenants. After obtaining a valid Graph token, it enables reconnaissance, establishes persistence (e.g., injecting OAuth apps and inbox rules), performs privilege escalation, and exfiltrates sensitive data from mailboxes, SharePoint, and Teams. Use only in authorized testing environments.

This skill generates robust, production-grade Appium automation scripts for both Android and iOS. It supports multiple languages (Java, Python, JavaScript) and guides users through best practices for cross-platform testing, including proper locator strategies, explicit waiting, and complex gestures. Ideal for automating mobile QA processes on local emulators or cloud real device farms.

A comprehensive, four-phase methodology for debugging complex software issues. It guides users through root cause investigation, pattern analysis, hypothesis testing, and controlled implementation. The core principle emphasizes finding the underlying cause rather than applying quick, symptomatic fixes, ensuring robust and reliable code improvements across various failure scenarios.

Provides comprehensive guidelines and utilities for modern unit testing using Jest and React Native. Covers Test-Driven Development (TDD) workflows, Behavior-Driven Development (BDD) principles, advanced mocking strategies for modules and GraphQL hooks, and implementing reusable factory functions for props and data. Use this skill to write robust, maintainable, and highly structured unit tests.

A comprehensive guide and generator for writing robust, production-grade unit and integration tests using JUnit 5 in Java. It covers advanced features like parameterized tests, Mockito mocking, lifecycle management, and nested test structures. Use this skill when you need to write clean, reliable, and highly structured Java test suites.

This skill provides comprehensive guidance on choosing and creating the appropriate Neon Postgres branch for development and testing workflows. Users must decide between a 'Normal' branch (for realistic migration testing with live data) or a 'Schema-Only' branch (for highly sensitive data environments). It details the decision rules, tool selection (CLI/MCP), and procedures for branch creation and resetting.