Skill UI

This skill implements a robust, multi-layered security hardening process based on the Defense-in-Depth strategy and DevSecOps principles. It coordinates specialized agents to perform comprehensive security assessments (SAST, DAST, SBOM, Threat Modeling), identify critical vulnerabilities, and execute layered remediation. The process covers application code, backend APIs, frontend components, and mobile platforms, ensuring a resilient security posture across the entire development lifecycle.

Performs authorized SMTP penetration testing to discover open relays, user enumeration vectors, authentication weaknesses, and misconfigurations, then documents findings, relay status, and remediation steps.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

Scans FunC-based TON smart contracts for boolean, Jetton, and gas handling vulnerabilities, reporting critical issues with file references and offering remediation guidance for auditors and secure dApp launches.

Provides a structured reference covering the 100 most critical web vulnerabilities, including definitions, root causes, impacts, and mitigation guidance aligned with OWASP categories to support assessments and remediation planning.

Provides a structured reference of the 100 most critical web application vulnerabilities organized by category, helping security teams identify attack vectors, assess impacts, and follow remediation guidance during audits or penetration tests.

Validates PCI DSS compliance by running the pci-dss-validator plugin on codebases or infrastructure configs, then reports violations and remediation steps for developers, security engineers, and compliance officers.

This expert skill validates the deployment readiness of Vertex AI Agent Engines. It executes a weighted audit across five critical dimensions: security, monitoring, performance, compliance, and best practices. The output provides a comprehensive 0-100% composite score, a detailed pass/fail report for each check, and a prioritized, actionable remediation plan, ensuring high-quality, production-grade deployments.

Automates vulnerability report generation within Security Advanced, guiding users through best practices, compliance checks, and actionable remediation for enterprises.

A comprehensive guide for auditing web content against WCAG 2.2 guidelines. This skill assists users in conducting thorough accessibility audits by combining automated scans (Axe, Lighthouse) with critical manual checks, such as keyboard navigation and screen reader flow. It provides actionable remediation strategies to ensure compliance with standards like ADA and Section 508.

Guides systematic detection and exploitation of cross-site scripting and HTML injection flaws, covering stored/reflected/DOM vectors, payload crafting, and remediation advice for web security assessments.