Skill UI

Simulates advanced persistent threat (APT) activity across the entire cyber kill chain, from reconnaissance to data exfiltration. It evaluates an organization's detection, prevention, and response capabilities using MITRE ATT&CK-aligned techniques, moving beyond typical vulnerability scanning. Ideal for objective-based assessments and purple teaming.

This comprehensive skill provides best practices for secure coding across multiple domains. It guides developers on managing secrets, validating user input, preventing SQL injection, implementing robust authentication and authorization (including RLS), and mitigating XSS attacks. Use this when handling sensitive data, APIs, or user-generated content to ensure the highest level of security.

This skill empowers you to implement secure backend development practices, focusing on input validation, authentication, and API security. It covers vulnerability prevention, defensive programming, and secure architecture implementation. Ideal for writing secure code, configuring security headers, managing secrets, and protecting databases against common attack vectors like SQL injection and CSRF.