Skill UI

This skill generates comprehensive, academic-style survey papers as a single, self-contained HTML file. By reading an anchor resource and curating research data, it structures the content and utilizes advanced LLMs (like Kimi K2.6 via Fireworks) to generate all prose, figures, and bibliographies, suitable for rapid academic literature review.

This skill enables the creation and maintenance of highly structured, configurable research wikis. It manages source provenance, compiling raw source materials into organized concept pages, index maps, and derived artifacts. Ideal for systematically documenting complex knowledge bases, such as research notes, product documentation, or domain studies, ensuring full traceability and consistency.

This document provides a comprehensive guide to the principles and vocabulary needed to write high-quality, predictable, and effective skills. It covers advanced concepts like model-invoked vs. user-invoked skills, managing context load, structuring information hierarchies (steps vs. reference), and implementing progressive disclosure to improve agent predictability.

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

This skill guides the architecture and implementation of SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers establishing seamless Single Sign-On (SSO) capabilities, eliminating the need for separate credentials and ensuring secure, cross-domain authentication for cloud applications.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.

This framework provides comprehensive detection capabilities for compromised cloud credentials across major platforms including AWS, Azure, and GCP. It analyzes critical threat indicators such as anomalous API activity, impossible travel patterns (impossible login locations), and unauthorized resource provisioning. Designed for incident response, security monitoring, and building robust detection rules to mitigate account takeover and credential abuse.

This skill uses Python and boto3 to analyze AWS CloudTrail logs. It establishes statistical baselines of normal API activity and detects various anomalies, such as unusual event sources, first-time API usage, geographic IP deviations, and high-frequency calls. This is critical for identifying credential compromise, privilege escalation, and unauthorized resource access in a security incident.

Microsoft Entra PIM enforces Just-in-Time (JIT) access by replacing standing (permanent) privileges with time-bound, eligible assignments. This workflow mandates explicit role activation, justification, Multi-Factor Authentication (MFA), and optional approval workflows, significantly reducing the attack surface and ensuring adherence to Zero Trust principles for critical Azure and Entra roles.

This guide provides a comprehensive approach to securing AWS Identity and Access Management (IAM) configurations. It walks practitioners through inventorying existing permissions, using Access Analyzer to identify overly permissive policies, implementing specific resource scoping, and attaching permission boundaries. Key strategies include enforcing least privilege access, managing credential rotation, and meeting stringent compliance requirements like SOC 2 and PCI-DSS.

This guide details the process of deploying and configuring Proofpoint Email Protection, a cloud-native Secure Email Gateway (SEG). It establishes a critical security checkpoint for all mail traffic, protecting users from advanced threats including phishing, malware, Business Email Compromise (BEC), and spam. The implementation covers architectural planning, advanced threat defense (sandboxing, ML classifiers), and compliance with protocols like DMARC, SPF, and DKIM.

Learn how to configure and execute access recertification campaigns within Saviynt Enterprise Identity Cloud. This comprehensive process validates user entitlements, ensures strict compliance with standards like SOX, SOC2, and HIPAA, and automates the timely revocation of excessive or unused access rights.