Skill UI

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

This guide details how to implement robust content safety guardrails for applications powered by Claude. It covers essential techniques such as system prompt hardening, input validation to detect injection patterns and length limits, and output validation to prevent system prompt leakage. It ensures compliance with Anthropic's policies, making the AI integration secure and reliable.

A comprehensive, multi-phase checklist for deploying and validating CAST AI cost optimization and autoscaling features on a production Kubernetes cluster. It guides users through prerequisites, initial monitoring setup (Phase 1), full autoscaling enablement (Phase 2), security hardening (RBAC, secrets), and critical validation commands for safe go-live deployment.

This comprehensive checklist guides users through critical operational readiness steps for a ClickHouse production deployment. It covers server tuning (config.xml), schema design best practices, robust backup strategies (S3), detailed monitoring setup (Prometheus/Grafana), security hardening, and application integration verification. Use this document before go-live, during major upgrades, or when auditing production systems to ensure maximum stability and performance.

This comprehensive guide details best practices for securing a ClickHouse deployment. It covers essential security measures including role-based access control (RBAC) for granular user permissions, implementing row-level security for multi-tenancy, configuring network IP restrictions, enabling TLS encryption, and setting up detailed audit logging. Use this when hardening a production ClickHouse instance or enforcing strict data governance.

Provides comprehensive guidelines for securing CoreWeave cloud deployments on Kubernetes. Covers critical security areas including credential management, implementing Role-Based Access Control (RBAC), enforcing network isolation policies, and handling sensitive secrets for ML model access. Essential for hardening GPU workloads and protecting data in cloud environments.

This comprehensive checklist guides developers through hardening their application for production deployment on Fly.io. It covers critical aspects such as multi-region redundancy, secure secret management, robust health checks, graceful shutdown procedures, and automated rollback mechanisms. Use it to ensure your edge-deployed application is highly available, reliable, and resilient against common operational failures.

A comprehensive guide to securing Navan integrations and API access. This skill covers OAuth 2.0 best practices, secure credential storage, automated credential rotation, configuring Single Sign-On (SSO) via SAML/OpenID Connect, and implementing automated user lifecycle management using SCIM provisioning. Essential for hardening enterprise-level integrations.

A comprehensive reference and bypass catalog covering modern operating system kernel mitigations such as KASLR, SMAP, SMEP, KPTI, DEP/NX, and CFI. It details how these security mechanisms function, how to detect their presence, and advanced bypass techniques (e.g., side-channel attacks, ROP chains, information leaks). This skill is essential for security professionals conducting deep penetration testing, exploit development, and target hardening assessments.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

This skill performs a proactive, comprehensive audit to quantify the business and regulatory impact of a potential data breach before it occurs. It inventories sensitive data (PII, PHI, PCI-DSS), traces complex data flows through the codebase, identifies all exposure vectors, and calculates the 'blast radius.' The output provides law-sourced figures (e.g., GDPR, CCPA, HIPAA fine maximums) alongside heuristic risk estimates, guiding proactive hardening roadmaps for compliance and security.

Covers WPA3/SAE attack techniques including transition-mode downgrade, Dragonblood side-channel analysis, SAE authentication flooding, H2E checks, and Wi-Fi 6E implications. Useful for assessing wireless security gaps and validating defensive hardening.