Skill UI

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

This utility performs comprehensive forensic analysis on memory dumps. It leverages industry-standard tools like Volatility and Mimikatz to extract sensitive information, including cached credentials, NTLM/LM hashes, Kerberos tickets, and authentication tokens. It is crucial for incident response, assessing the scope of credential compromise, and investigating lateral movement attacks.

A robust internal utility for integrating system status updates with Feishu/Lark. It allows other skills to send structured notifications (e.g., experiment complete, checkpoint waiting, review scores) via webhooks. Supports both 'Push only' (fire-and-forget) and 'Interactive' (bidirectional polling) modes, guaranteeing zero side effects if configuration is missing.

This utility implements comprehensive Cloud Workload Protection (CWPP) by monitoring compute workloads on cloud instances (EC2/GCE). It provides runtime security controls, detecting process anomalies, unauthorized binary execution, cryptomining activity, and suspicious network connections using AWS and Google APIs. Ideal for establishing robust security postures and meeting compliance requirements.

This utility executes atomic Red Team tests mapped to the MITRE ATT&CK framework. It is essential for purple team exercises, allowing security teams to assess detection coverage gaps, validate SIEM/EDR rules, and generate detailed ATT&CK coverage heatmaps. Use it to build continuous detection validation loops and measure blue team visibility against known adversary techniques.

This utility ensures the prevention of silent floating-point mismatch bugs across all EVM chains. It covers runtime querying of decimals, chain-aware caching, handling precision drift in bridged tokens, and safe normalization for bots, dashboards, and DeFi tools. It is crucial for accurate cross-chain balance comparison.

A comprehensive, generics-first utility library designed for Go developers who prefer declarative, functional programming patterns over manual loops. It provides 500+ type-safe functions for common data transformations (Map, Filter, Reduce, GroupBy, etc.) on slices, maps, and strings. By defaulting to immutable operations, it ensures thread safety and predictable state changes. The library also offers specialized packages (lop, lom, loi) to address performance bottlenecks, such as CPU-bound parallel processing or lazy evaluation, allowing engineers to choose the optimal approach for their c...

Provides a well-structured skill template with metadata for `lark-cli`, helping developers verify formatting and readiness before deployment.

Command-line utility to append rows into a Google Sheets spreadsheet, supporting single-row values, bulk JSON payloads, and targeting specific sheet ranges for automation workflows.

A utility for interacting with the Lark/Feishu communication directory. It allows users to search for employees by name or email to obtain an open_id, or use an open_id to retrieve comprehensive profile data, including department, contact details, status, and signature. Ideal for preparing information before sending messages or scheduling events. Note that department tree traversal and organizational structure mapping require native OpenAPI calls.

A robust CLI tool for connecting to Lark/Feishu real-time events. It allows streaming, subscribing, and consuming various events (e.g., IM messages, reactions, meeting updates) as NDJSON output. Ideal for developing Lark bots, building real-time message processors, or implementing long-running streaming webhook handlers, especially in AI agent subprocesses.