Skill UI

This comprehensive guide outlines best practices for securing Granola meeting data. It covers critical compliance standards, including SOC 2 and GDPR, and details technical controls such as AES-256 encryption, TLS 1.3 transmission, and robust configuration of SSO and data retention policies for enterprise use.

This skill audits Azure Blob and ADLS storage accounts for critical security misconfigurations. It checks for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, and outdated TLS versions. Using the Python SDK, it generates a detailed, risk-scored report to enhance cloud security posture management and detect potential data exposure risks.

A comprehensive guide for implementing a highly secure and reliable centralized logging pipeline using rsyslog. This method utilizes TLS encryption via X.509 certificate authentication and GnuTLS stream drivers, ensuring all log data is securely transmitted. The guide covers per-host log segregation, robust log rotation, and disk-assisted queueing for high-availability log infrastructure, making it ideal for compliance and security operations.

Provides a comprehensive guide to auditing the security posture of the etcd cluster, the critical key-value store backing Kubernetes. This assessment covers encryption at rest for secrets, TLS transport security, access control policies, secure backup procedures, and network isolation best practices. Essential for hardening control planes and ensuring regulatory compliance.

Simulates man-in-the-middle (MITM) attacks by stripping SSL/TLS encryption, forcing HTTPS connections to downgrade to insecure HTTP. This skill is designed for authorized penetration testing to validate HSTS enforcement, assess certificate validation mechanisms, and train security teams on detecting cleartext data leakage during a downgrade attack.

This skill provides comprehensive guidance on implementing HIPAA-compliant security measures for Abridge clinical AI integrations. It covers critical areas such as enforcing TLS 1.3 encryption in transit, AES-256 encryption at rest, implementing role-based access controls (RBAC), detailed PHI-safe audit logging, and best practices for secrets management, ensuring full compliance with HIPAA regulations.

This comprehensive guide details best practices for securing a ClickHouse deployment. It covers essential security measures including role-based access control (RBAC) for granular user permissions, implementing row-level security for multi-tenancy, configuring network IP restrictions, enabling TLS encryption, and setting up detailed audit logging. Use this when hardening a production ClickHouse instance or enforcing strict data governance.

Comprehensive hardening guide for Model Context Protocol (MCP) servers, covering threat modeling, transport encryption (TLS/mTLS), OAuth 2.1 authentication, tool authorization, input validation, and audit logging to secure AI agent integrations.