Skill UI

A specialist tool designed to generate, format, and validate comprehensive technical documentation. It supports multiple standards, including Google/NumPy docstrings (for Python), JSDoc (for TypeScript), and full OpenAPI/Swagger specifications. Key features include automated detection of code languages and frameworks, robust validation of code examples (using tools like doctest and OpenAPI linters), and generating structured user guides or site configurations.

Automates code injection detection guidance as part of Security Fundamentals, offering step-by-step advice, best-practice patterns, and production-ready snippets for authentication, input validation, and secure coding scenarios.

Automated guidance for cookie security analysts that covers authentication, validation, secure coding, and vulnerability detection while generating production-ready code and configurations.

Assists with security fundamentals by auto-activating when asked about https certificate checker tasks, guiding through detection patterns, secure coding, and validation workflows for reliable certificate handling.

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.

This comprehensive checklist guides the operational validation of the Juicebox AI talent search and analysis platform in a production environment. It ensures system reliability, data security, and service continuity by reviewing critical areas such as API key management, rate limit handling, robust error detection (circuit breakers, exponential backoff), data encryption (GDPR/CCPA compliance), and comprehensive monitoring setup. It is essential for preventing service failures and maintaining search data integrity.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

Automates the creation and validation of security headers by guiding users through authentication, input validation, secure coding, and vulnerability detection practices within the Security Fundamentals domain.

Session Security Guide supplies automated, production-ready assistance for session security checker tasks, offering best practice guidance on authentication, validation, secure coding, and vulnerability detection.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

Provides a structured methodology for proactive threat hunting against Living-off-the-Land Binaries (LOLBins). It guides practitioners in identifying techniques where adversaries abuse legitimate system tools (like certutil, mshta, rundll32) to execute payloads while bypassing traditional security controls (AV/EDR). Ideal for incident response, red team validation, and improving detection coverage against fileless attacks.

This skill provides a systematic framework for managing Indicators of Compromise (IOCs) throughout their entire life cycle—from initial discovery and validation to enrichment, deployment, monitoring, and eventual retirement. It emphasizes implementing confidence decay functions, tracking hit rates, and managing false positives to maintain a high-quality, actionable threat intelligence database, thereby minimizing analyst fatigue and maximizing detection efficacy.