Skill UI

This guide outlines comprehensive security best practices for integrating with Palantir Foundry. It covers secure credential storage (using secrets managers like AWS Secrets Manager or Vault), implementing the Principle of Least Privilege via OAuth2 scopes, and establishing robust credential rotation procedures. Use this when securing production environments, setting up new data pipelines, or auditing existing API access controls.

A comprehensive, step-by-step guide for safely upgrading the Palantir Foundry SDK. This skill covers version dependency checks, reviewing breaking changes via API changelogs, running integrated unit and integration tests, and implementing robust rollback procedures, ensuring smooth platform migration.

This comprehensive guide details the process of implementing a secure and robust system for handling Palantir Foundry webhook events. It covers key steps including API-based webhook registration, mandatory signature verification with replay protection, sophisticated event routing for various object lifecycles (create, update, delete), and ensuring idempotent processing using caching mechanisms like Redis. Use this when external microservices must react reliably and immediately to changes within the Foundry Ontology or data assets.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

A comprehensive playbook for expert-level Android application security testing. It covers advanced exploitation techniques, including SSL pinning bypass (using Frida/Objection), detecting component exposure (activities, providers, services), and exploiting WebView vulnerabilities (RCE, XSS). Essential for authorized mobile penetration testing assessments.

This expert playbook details advanced techniques for bypassing SSL pinning mechanisms (Certificate, Public Key, SPKI) on mobile applications running on Android and iOS. It provides practical methods using tools like Frida and Objection, covering various frameworks (Flutter, React Native, Xamarin) and multiple pinning types to enable the interception and analysis of encrypted HTTPS traffic.

Provides high-level strategic guidance for founders and Chief Data Officers (CDOs) in startups. This skill covers critical decisions such as AI training data rights and consent provenance, selecting optimal data architectures (warehouse, lakehouse, data mesh), valuing customer data as a strategic asset for M&A or fundraising, and planning data team organizational evolution. It focuses exclusively on strategic decision-making, not tactical engineering.

This skill analyzes high-stakes strategic memos or business briefs by running them through multiple leading AI models (e.g., Claude, Codex, Gemini). It identifies consensus concerns, key supports, and critical divergences, providing a robust, multi-perspective assessment. Ideal for mitigating single-model bias in irreversible decisions like M&A, fundraises, or major pivots.

The /cs:freeze command implements a governance lock on major strategic decisions (e.g., fundraise, layoffs, market entry). By setting a mandatory cooldown period, the system prevents premature reversal or second-guessing, protecting the focus and authority established by critical board decisions. It enforces founder discipline and maintains process integrity.

A rigorous, YC-style interrogation tool designed to force founders to validate their core business assumptions before seeking advice. It demands concrete answers across six critical dimensions: Problem, Customer, Distribution, Defensibility, Capital, and Founder Fit. Use this before strategic pivots, major initiatives, or fundraising to prevent solutionism and surface fundamental weaknesses.

This skill operates as a blunt, market-obsessed operating system, emulating the rigorous thought process of Marc Andreessen. It is designed to pressure-test ideas, ventures, and product strategies by strictly adhering to market-first principles (Market > Team > Product) and focusing solely on achieving Product/Market Fit (PMF). It rejects platitudes, refuses to validate premises, and is ideal for determining if a business concept has real market traction or if the venture is fundamentally flawed.