Skill UI

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Configure GDPR-compliant data handling, PII scrubbing, and data retention policies within Sentry. This skill provides detailed instructions on implementing client-side `beforeSend` hooks and server-side scrubbing rules to securely redact sensitive data (passwords, emails, IP addresses, CC numbers). Essential for achieving compliance with regulations like GDPR, HIPAA, and meeting SOC 2 audit controls.

This comprehensive guide details how to harden Sentry's security posture and ensure compliance with regulations like GDPR. It covers best practices for managing sensitive data, implementing PII scrubbing, and configuring `beforeSend` hooks to automatically redact sensitive information such as passwords, API keys, tokens, IP addresses, and emails from client-side and server-side events.

This module provides the essential three pillars for building robust full-stack applications on Supabase. It implements comprehensive user authentication (including OAuth, email/password, and session management), secure file storage (uploading, downloading, and managing signed URLs), and real-time data subscriptions (listening to Postgres changes, presence, and broadcasts). It is crucial for developing modern, live-updating, and highly secure web services.

Validating Authentication Implementations assesses authentication mechanisms like JWT, OAuth, sessions, and API keys against security standards, then reports vulnerabilities and recommendations for password policy, MFA, token handling, and session security.

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.

Varlock provides secure, default environment variable management, ensuring that sensitive secrets (like API keys and passwords) are never exposed in logs, terminal output, or the AI context. It validates environments, reads schemas, and executes commands in a secure manner, promoting best practices for handling secrets in modern development workflows.

A specialized tool for auditing source code (C/C++/Rust) to ensure sensitive data (keys, passwords, PII) is properly zeroized. It analyzes memory handling at the assembly and IR level to detect if compiler optimizations, such as dead-store elimination, have accidentally removed or weakened the secure cleanup process. Essential for maintaining security in critical codebases.

Hindsight is an open-source digital forensics tool designed to parse and correlate artifacts from Chromium-based browsers (Chrome, Edge, Brave, Opera). It extracts comprehensive data, including browsing history, cookies, download records, autofill data, and saved passwords, generating unified, chronological timelines essential for incident response, insider threat investigation, and digital forensics cases.

A comprehensive toolkit using Splunk's SPL language to analyze Windows Security, System, and Sysmon event logs. It maps advanced detection queries to specific MITRE ATT&CK techniques, enabling SOC analysts to investigate authentication attacks (e.g., brute force, password spraying), detect privilege escalation, locate persistence mechanisms, and trace lateral movement for detailed forensic timeline analysis.

Pass-the-Ticket (PtT) is a critical post-exploitation technique used in red teaming and offensive security assessments. It allows an attacker to move laterally across a network by utilizing stolen Kerberos tickets (TGT or TGS) without ever needing the user's password. This skill outlines the process of dumping tickets from memory (e.g., LSASS) and injecting them into a current session to impersonate a high-privilege user for access to sensitive resources.