Skill UI

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

This utility provides a comprehensive framework for proactive threat hunting, focusing on detecting advanced and suspicious PowerShell execution patterns. It covers common attacker techniques such as encoded command usage, download cradles (IEX), AMSI bypass attempts, and constrained language mode evasion. It is designed for security analysts during incident response and threat intelligence validation, requiring EDR and SIEM telemetry.

This utility performs comprehensive forensic analysis on memory dumps. It leverages industry-standard tools like Volatility and Mimikatz to extract sensitive information, including cached credentials, NTLM/LM hashes, Kerberos tickets, and authentication tokens. It is crucial for incident response, assessing the scope of credential compromise, and investigating lateral movement attacks.

This utility integrates status updates and notifications with Feishu/Lark. It is designed as an internal, zero-impact tool that other complex skills (e.g., experiment runners, review loops) call to report key events like test completion, scoring results, or reaching a checkpoint. It supports both 'push' (fire-and-forget status updates) and 'interactive' (bidirectional approval/rejection) modes, ensuring seamless workflow visibility and robust operation even if configuration is missing.

This utility implements comprehensive Cloud Workload Protection (CWPP) by monitoring compute workloads on cloud instances (EC2/GCE). It provides runtime security controls, detecting process anomalies, unauthorized binary execution, cryptomining activity, and suspicious network connections using AWS and Google APIs. Ideal for establishing robust security postures and meeting compliance requirements.

This utility implements an append-only log integrity chain using SHA-256 hash chaining. It ensures tamper detection by linking each log entry to the previous one, forming a blockchain-like structure. Functions include log ingestion, chain verification, pinpoint tamper detection, and anchoring to external timestamping services for robust audit logging and compliance.

This utility ensures the prevention of silent floating-point mismatch bugs across all EVM chains. It covers runtime querying of decimals, chain-aware caching, handling precision drift in bridged tokens, and safe normalization for bots, dashboards, and DeFi tools. It is crucial for accurate cross-chain balance comparison.

This utility compresses verbose natural language notes, memories, and documents (like markdown files) into a highly dense format. By eliminating filler words, redundant phrases, and grammatical fluff, it significantly reduces the token count for large inputs. Crucially, it strictly preserves all technical content, including code blocks, inline code, URLs, file paths, and commands, ensuring technical accuracy while boosting AI processing efficiency.

A Lodash-inspired, generics-first utility library providing 500+ type-safe functions for common data transformations in Go. It eliminates boilerplate code associated with manual loops, offering declarative methods like Map, Filter, Reduce, and GroupBy. The library supports core immutable operations (lo), concurrent variants (lop), mutable mutations (lom), and lazy iterators (loi), allowing developers to choose the optimal approach based on performance profiling and memory constraints. Ideal for implementing robust, type-safe data pipelines.

Provides a well-structured skill template with metadata for `lark-cli`, helping developers verify formatting and readiness before deployment.

Command-line utility to append rows into a Google Sheets spreadsheet, supporting single-row values, bulk JSON payloads, and targeting specific sheet ranges for automation workflows.