Skill UI

Collects Docker build, compose, and runtime tips including multi-stage builds, isolated dependencies, compose healthchecks, .dockerignore, image analysis, and security anti-patterns to streamline container pipelines.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

This comprehensive guide catalogs common anti-patterns and mistakes when deploying applications on Vercel. It covers critical architectural areas such as secret management (preventing key exposure), optimizing serverless function performance (cold start, timeouts), adhering to Edge Runtime standards, and resolving configuration errors. Use this skill for code reviews, security audits, and onboarding new developers to ensure best deployment practices.

Provides an OWASP 2025-aligned vulnerability scanning mindset, supply chain defenses, attack surface mapping, and risk prioritization guidance with runtime scripts for automated validation of modern application security.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.

A comprehensive guide for conducting penetration testing on iOS and Android mobile applications, adhering to the OWASP MASTG. This skill covers the full mobile attack surface, including static analysis of binaries, dynamic runtime testing, and deep API security assessment. Techniques taught include bypassing certificate pinning, analyzing local data storage (Keychain, SQLite), and identifying vulnerabilities in authentication and network communication.

A comprehensive guide for deploying and operationalizing Amazon GuardDuty. It provides continuous, intelligent threat detection across core AWS services including S3, EKS, and EC2 runtime monitoring. Use this skill to investigate suspicious activity, detect compromised credentials, or build automated incident response playbooks using EventBridge and Lambda for proactive security.

This skill outlines methods and rules for detecting container drift—the unauthorized deviation of a running container from its original, immutable image state. By monitoring binary execution, filesystem writes, and configuration changes using tools like Falco and Kubernetes security context controls, users can investigate potential compromises, validate immutable infrastructure controls, and enhance overall container security posture.

This skill provides a comprehensive framework to detect and prevent privilege escalation within Kubernetes pods. It merges preventative measures using admission controllers (like OPA Gatekeeper or Pod Security Admission) to enforce security policies, with runtime monitoring using tools like Falco. It detects dangerous capabilities, unauthorized host access, and suspicious syscall patterns, making it crucial for hardening K8s security posture.

This comprehensive guide details security best practices for hardening Docker containers and their underlying infrastructure (daemon, runtime, images). It aligns with standards like the CIS Docker Benchmark v1.8.0, enforcing least privilege through non-root users, capability dropping, read-only filesystems, and advanced security profiles (seccomp/AppArmor). Essential for building highly secure, compliant, and production-ready container environments.

This solution enforces strict data contract validation for all APIs using OpenAPI Specification (OAS) and JSON Schema. It ensures that all incoming requests and outgoing responses conform to predefined structures. By implementing validation at both the API Gateway (runtime) and during development (shift-left), it effectively prevents critical security vulnerabilities such as SQL injection, XSS, unauthorized data leakage, and mass assignment.