GrayCodeAI/starling - الصفحة ٦

caveman-commit

Generate terse Conventional Commit messages with a subject of at most 50 characters and a body only when the reason is not obvious.

لغة النص الأصلي: الإنجليزية

caveman-compress

Compress memory and preference files into token-efficient caveman text while preserving technical content, code, URLs, structure, and a readable backup.

لغة النص الأصلي: الإنجليزية

caveman-review

Produce terse, actionable code-review findings as one line per issue containing its location, problem, and proposed fix.

لغة النص الأصلي: الإنجليزية

caveman

Use a persistent, technically accurate compressed communication mode with selectable caveman or wenyan intensity when users request brevity or token efficiency.

لغة النص الأصلي: الإنجليزية

caveman-stats

Report measured session token usage and estimated savings from the Claude Code log through the caveman mode-tracker hook.

لغة النص الأصلي: الإنجليزية

extra-swift-testing-api

Swift Testing framework API documentation for creating and running tests in Swift packages

لغة النص الأصلي: الإنجليزية

extra-swift6-migration

Guide for migrating Swift code to Swift 6 with concurrency and strict checking

لغة النص الأصلي: الإنجليزية

extra-update-docs

Skill: extra-update-docs

لغة النص الأصلي: الإنجليزية

detecting-sql-injection-via-waf-logs

Analyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to identify SQLi patterns (UNION SELECT, OR 1=1, SL...

لغة النص الأصلي: الإنجليزية

performing-second-order-sql-injection

Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.

لغة النص الأصلي: الإنجليزية

tl-r2-sql

Skill: tl-r2-sql

لغة النص الأصلي: الإنجليزية

analyzing-docker-container-forensics

Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.

لغة النص الأصلي: الإنجليزية

analyzing-kubernetes-audit-logs

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat detection rules fro...

لغة النص الأصلي: الإنجليزية

auditing-kubernetes-cluster-rbac

Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using...

لغة النص الأصلي: الإنجليزية

auditing-kubernetes-rbac-permissions

Kubernetes Role-Based Access Control (RBAC) auditing systematically reviews roles, cluster roles, bindings, and service account permissions to identify overly permissive access, privilege escalation p

لغة النص الأصلي: الإنجليزية

auditing-terraform-infrastructure-for-security

Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM policies, public resource exposure, m...

لغة النص الأصلي: الإنجليزية

building-mcp-server-on-cloudflare

Builds remote MCP (Model Context Protocol) servers on Cloudflare Workers with tools, OAuth authentication, and production deployment.

لغة النص الأصلي: الإنجليزية

detecting-privilege-escalation-in-kubernetes-pods

Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.

لغة النص الأصلي: الإنجليزية

detecting-supply-chain-attacks-in-ci-cd

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets expo...

لغة النص الأصلي: الإنجليزية

hardening-docker-containers-for-production

Hardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce leas

لغة النص الأصلي: الإنجليزية

hardening-docker-daemon-configuration

Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.

لغة النص الأصلي: الإنجليزية

implementing-kubernetes-network-policy-with-calico

Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.

لغة النص الأصلي: الإنجليزية

implementing-kubernetes-pod-security-standards

Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS

لغة النص الأصلي: الإنجليزية

implementing-network-policies-for-kubernetes

Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints. Combined with CNI plu

لغة النص الأصلي: الإنجليزية

implementing-rbac-for-kubernetes-cluster

Configure Kubernetes Role-Based Access Control (RBAC) to enforce least-privilege access to cluster resources. This skill covers Role/ClusterRole design, RoleBinding configuration, service account secu

لغة النص الأصلي: الإنجليزية

implementing-rbac-hardening-for-kubernetes

Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.

لغة النص الأصلي: الإنجليزية

implementing-secrets-scanning-in-ci-cd

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment

لغة النص الأصلي: الإنجليزية

integrating-sast-into-github-actions-pipeline

This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines. It addresses configuring automated code scanning on pull reque...

لغة النص الأصلي: الإنجليزية

performing-docker-bench-security-assessment

Docker Bench for Security is an open-source script that checks dozens of common best practices around deploying Docker containers in production. Based on the CIS Docker Benchmark, it audits host confi

لغة النص الأصلي: الإنجليزية

performing-kubernetes-cis-benchmark-with-kube-bench

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

لغة النص الأصلي: الإنجليزية

performing-kubernetes-etcd-security-assessment

Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.

لغة النص الأصلي: الإنجليزية

performing-kubernetes-penetration-testing

Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets. Using tools

لغة النص الأصلي: الإنجليزية

scanning-docker-images-with-trivy

Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati

لغة النص الأصلي: الإنجليزية

scanning-kubernetes-manifests-with-kubesec

Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.

لغة النص الأصلي: الإنجليزية

securing-github-actions-workflows

This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN p...

لغة النص الأصلي: الإنجليزية

securing-helm-chart-deployments

Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.

لغة النص الأصلي: الإنجليزية

securing-kubernetes-on-cloud

This skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and...

لغة النص الأصلي: الإنجليزية

tl-terraform

Skill: tl-terraform

لغة النص الأصلي: الإنجليزية

create-markmap-visualization

Fabric pattern - create_markmap_visualization

لغة النص الأصلي: الإنجليزية

extract-insights-dm

Fabric pattern - extract_insights_dm

لغة النص الأصلي: الإنجليزية