Skill UI

This skill conducts deep, structured competitor analysis using Browserbase's advanced discovery and enrichment tools. It generates a comprehensive HTML report that includes market overviews, detailed per-competitor deep dives (covering marketing, social, news, and technical aspects), side-by-side feature/pricing matrices, and comparative mentions feeds. Ideal for market researchers, product managers, and strategists needing actionable competitive intelligence.

This tool evaluates how thoroughly a feature implementation meets product requirements (PRDs) or specifications. It scores acceptance criteria case-by-case, independently grading both the code implementation and the associated test coverage (unit and E2E). Ideal for benchmarking multiple development efforts, auditing adherence to specifications, or determining if a feature is 100% complete and compliant with the ground truth PRD.

This guide provides a comprehensive approach to securing AWS Identity and Access Management (IAM) configurations. It walks practitioners through inventorying existing permissions, using Access Analyzer to identify overly permissive policies, implementing specific resource scoping, and attaching permission boundaries. Key strategies include enforcing least privilege access, managing credential rotation, and meeting stringent compliance requirements like SOC 2 and PCI-DSS.

Learn how to configure and execute access recertification campaigns within Saviynt Enterprise Identity Cloud. This comprehensive process validates user entitlements, ensures strict compliance with standards like SOX, SOC2, and HIPAA, and automates the timely revocation of excessive or unused access rights.

Business Email Compromise (BEC) is a sophisticated fraud scheme relying on social engineering. This skill provides comprehensive guidance on detecting and mitigating BEC attacks. It covers using email gateway rules, behavioral analytics, and implementing financial controls to identify impersonation attempts, altered payment details, and urgent fraudulent requests.

A comprehensive guide to deploying cloud-native deception across AWS, Azure, and GCP. This skill utilizes decoy resources—such as canary IAM keys, honey object storage buckets, and decoy secrets—whose sole purpose is to generate high-fidelity alerts the instant they are interacted with by an attacker. It detects cloud reconnaissance, credential theft, and lateral movement by wiring detection through native logging services (CloudTrail, Sentinel, Cloud Audit Logs), ensuring near-zero false positives for the SOC.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

This skill provides a comprehensive solution for monitoring brand impersonation attacks across multiple digital vectors. It systematically scans domains, social media platforms, mobile app stores, and the dark web to detect phishing campaigns, typosquatting, and unauthorized brand usage. It is essential for security teams conducting proactive threat intelligence gathering and vulnerability assessments to safeguard brand integrity.

This skill details the process of building and maintaining a comprehensive anti-phishing training program. It covers establishing baseline susceptibility assessments, deploying regular, progressive simulations, and providing interactive, role-based learning modules (using platforms like KnowBe4 or Proofpoint). The focus is on measuring and improving the human layer of defense against social engineering and sophisticated phishing attempts, thereby fostering a continuous security culture.

A comprehensive guide to achieving compliance with the HIPAA Security Rule (45 CFR Part 164). This skill outlines the mandatory steps to protect electronic Protected Health Information (ePHI), including conducting thorough risk analyses, deploying administrative, physical, and technical safeguards, managing Business Associate Agreements (BAAs), and preparing for breach notifications and OCR audits. Essential for Covered Entities and Business Associates.

Implements HashiCorp Vault's dynamic secrets engine to automatically generate, lease, and rotate short-lived credentials for databases (e.g., Postgres, MySQL), AWS IAM keys, and PKI certificates. This eliminates the risk associated with storing static secrets, ensuring compliance with zero-trust principles and automating the entire secret lifecycle.

A comprehensive framework for managing third-party risk (TPRM) throughout the entire vendor lifecycle. This tool guides users through inventory, risk tiering, running due diligence questionnaires (SIG, CAIQ), reviewing security evidence (SOC 2, ISO 27001), codifying requirements in contracts, and establishing continuous monitoring protocols. It is essential for maintaining compliance, managing supply chain risk, and securing data handled by external vendors.