Skill UI

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

Analyze skin health trends, assess acne and mole risks, evaluate skincare and sun protection, and generate personalized prevention and care advice. Useful for routine skin monitoring, skin cancer prevention, and cross-analysis with nutrition, chronic disease, and medication data.

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

This guide details the implementation of Microsoft Defender for Cloud, enabling comprehensive cloud security posture management (CSPM) and workload protection (CWPP). Learn how to secure VMs, containers, databases, and storage accounts, configure security recommendations, and establish automated remediation workflows to ensure continuous compliance and robust cloud defense.

A comprehensive technical guide covering the implementation of Data Loss Prevention (DLP) across major cloud platforms, including AWS Macie, Google Cloud DLP, and Azure Information Protection. Learn how to automatically discover, classify, and protect sensitive data (PII, PHI) residing in cloud storage, databases, and data pipelines, ensuring adherence to compliance frameworks like GDPR and HIPAA.

This skill guides the implementation of full disk encryption using Microsoft BitLocker on Windows endpoints. It covers best practices for deploying encryption via GPO, Intune, and command line, ensuring data-at-rest protection. Use this when meeting compliance requirements (PCI, HIPAA) or securing mobile workstations against physical loss or theft.

A comprehensive guide to implementing technical and organizational measures required by the General Data Protection Regulation (GDPR). This skill covers full lifecycle data protection, including Data Protection by Design, Data Protection Impact Assessments (DPIAs), managing data subject rights (e.g., right to erasure, portability), encryption, pseudonymization, and ensuring cross-border data transfer compliance.

This guide provides comprehensive security hardening procedures for enterprise Google Workspace environments. It covers advanced topics such as enforcing phishing-resistant Multi-Factor Authentication (MFA), configuring email authentication (DMARC/SPF/DKIM), implementing Data Loss Prevention (DLP), and securing super admin accounts using Advanced Protection Program enrollment. Ideal for achieving high compliance and defending against BEC and phishing attacks.

This skill provides a comprehensive guide to implementing advanced memory protection mechanisms on Windows endpoints. It covers critical techniques like Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), and Control Flow Guard (CFG). Use this when hardening systems against various memory corruption exploits, such as buffer overflows and ROP chains, to significantly boost overall security posture.

This skill guides the implementation of Mobile Application Management (MAM) policies, enabling robust data protection for corporate assets on both managed and unmanaged mobile devices (BYOD). It covers configuring app-level controls such as Data Loss Prevention (DLP), selective wiping, and containerization using platforms like Microsoft Intune and Azure AD. Use this when enforcing data separation between personal and work environments without requiring full device enrollment.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.