Skill UI

A comprehensive guide for performing structured API security testing using Postman. It covers critical OWASP API Security Top 10 vulnerabilities, including BOLA, authentication bypass, and injection flaws. Ideal for building repeatable security regression tests, simulating multi-role user access, and integrating automated validation into CI/CD pipelines via Newman and OWASP ZAP.

This skill simulates security incidents using discussion-based tabletop exercises for Security Operations Center (SOC) teams. It is designed to test incident response procedures, evaluate cross-functional communication workflows (e.g., Legal, PR, Executive), and assess decision-making capabilities under pressure, all without touching production environments. Ideal for compliance validation, playbook refinement, and comprehensive team training.

This skill guides users through performing comprehensive threat modeling using the OWASP Threat Dragon tool. It covers creating Data Flow Diagrams (DFD), identifying vulnerabilities using established methodologies like STRIDE and LINDDUN, defining mitigations, and generating formal PDF reports. Ideal for secure design reviews, architecture validation, and achieving GRC compliance.

A comprehensive guide for performing systematic security assessments on web applications. Following the OWASP Web Security Testing Guide (WSTG), this process identifies critical vulnerabilities such as broken authentication, authorization flaws (IDOR), SQL injection, and Cross-Site Scripting (XSS). The workflow covers reconnaissance, mapping, and advanced testing techniques using tools like Burp Suite and sqlmap, ensuring deep coverage beyond automated scanner capabilities. Ideal for pre-production security validation and compliance audits.

Processes STIX 2.1 threat intelligence bundles delivered via TAXII 2.1 servers. It normalizes various threat intelligence objects (indicators, actors) into platform-native schemas, enabling automated ingestion, validation, and routing to SIEM, TIP, and EDR systems. Ideal for integrating new ISAC feeds or building bi-directional intelligence pipelines.

Validate business ideas with Sahil Lavingia’s Minimalist Entrepreneur playbook by selling a manual version, defining precise users, testing processes without code, and gauging if customers will pay before building.

This skill safely randomizes the order of repetitive JSON objects within an array without corrupting the data or breaking the JSON syntax. It acts as a data engineer, rigorously validating the input schema (checking for property consistency and lack of nesting) before performing the shuffle. It ensures data integrity is maintained while reordering records, making it ideal for testing, simulation, or data preparation workflows.

Generate production-quality React components and UIs using the specialized Rayden UI component library and Tailwind CSS. This skill ensures that all generated code strictly adheres to a defined design system, including correct component usage, design tokens, prop validation, and established layout patterns. Ideal for scaffolding complex pages like dashboards, login forms, and data tables while maintaining premium aesthetics and consistency.

This skill provides a comprehensive guide for integrating Anthropic Claude APIs into robust CI/CD pipelines. It includes mock-based unit tests for fast, reliable validation, as well as live prompt regression tests for ensuring output consistency on the main branch. Ideal for developers maintaining automated, Claude-powered features.

This skill establishes a comprehensive CI/CD pipeline specifically for Abridge clinical AI integrations using GitHub Actions. It enforces critical healthcare compliance steps, including FHIR R4 resource validation, robust detection of Protected Health Information (PHI) leaks (like SSN), and end-to-end sandbox integration testing. Ideal for deploying secure, compliant AI applications in the healthcare sector.

This comprehensive skill provides multi-layered guardrails for integrating with LLMs like Claude. It enforces security and compliance by implementing input validation (PII detection, length checks), system prompt restriction (scope control, safety rules), output filtering (preventing sensitive data leakage), cost governance, and model access policies. Ideal for building secure, robust, and governed AI applications.

This skill provides a comprehensive guide to implementing and managing BambooHR webhooks. It covers both global and permissioned webhook types, detailing the process from API setup to robust payload handling. Key security aspects include HMAC-SHA256 signature validation for ensuring data integrity and authenticity. Ideal for developers needing to build real-time employee synchronization triggers, process employee creation, updates, or deletions, and integrate BambooHR data into other enterprise systems.