Skills en este repositorio
SkillsMP ha recopilado 12.131 skills de GrayCodeAI/starling. Abre una skill para revisar su origen y sus detalles.
GrayCodeAI/starlingMostrando 40 de 12.131 skills recopiladas.
Generate terse Conventional Commit messages with a subject of at most 50 characters and a body only when the reason is not obvious.
Idioma del texto original: inglés
Compress memory and preference files into token-efficient caveman text while preserving technical content, code, URLs, structure, and a readable backup.
Idioma del texto original: inglés
Produce terse, actionable code-review findings as one line per issue containing its location, problem, and proposed fix.
Idioma del texto original: inglés
Use a persistent, technically accurate compressed communication mode with selectable caveman or wenyan intensity when users request brevity or token efficiency.
Idioma del texto original: inglés
Report measured session token usage and estimated savings from the Claude Code log through the caveman mode-tracker hook.
Idioma del texto original: inglés
Swift Testing framework API documentation for creating and running tests in Swift packages
Idioma del texto original: inglés
Guide for migrating Swift code to Swift 6 with concurrency and strict checking
Idioma del texto original: inglés
Skill: extra-update-docs
Idioma del texto original: inglés
Analyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to identify SQLi patterns (UNION SELECT, OR 1=1, SL...
Idioma del texto original: inglés
Detect and exploit second-order SQL injection vulnerabilities where malicious input is stored in a database and later executed in an unsafe SQL query during a different application operation.
Idioma del texto original: inglés
Skill: tl-r2-sql
Idioma del texto original: inglés
Investigate compromised Docker containers by analyzing images, layers, volumes, logs, and runtime artifacts to identify malicious activity and evidence.
Idioma del texto original: inglés
Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat detection rules fro...
Idioma del texto original: inglés
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using...
Idioma del texto original: inglés
Kubernetes Role-Based Access Control (RBAC) auditing systematically reviews roles, cluster roles, bindings, and service account permissions to identify overly permissive access, privilege escalation p
Idioma del texto original: inglés
Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive IAM policies, public resource exposure, m...
Idioma del texto original: inglés
Builds remote MCP (Model Context Protocol) servers on Cloudflare Workers with tools, OAuth authentication, and production deployment.
Idioma del texto original: inglés
Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
Idioma del texto original: inglés
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets expo...
Idioma del texto original: inglés
Hardening Docker containers for production involves applying security best practices aligned with CIS Docker Benchmark v1.8.0 to minimize attack surface, prevent privilege escalation, and enforce leas
Idioma del texto original: inglés
Harden the Docker daemon by configuring daemon.json with user namespace remapping, TLS authentication, rootless mode, and CIS benchmark controls.
Idioma del texto original: inglés
Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
Idioma del texto original: inglés
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS
Idioma del texto original: inglés
Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints. Combined with CNI plu
Idioma del texto original: inglés
Configure Kubernetes Role-Based Access Control (RBAC) to enforce least-privilege access to cluster resources. This skill covers Role/ClusterRole design, RoleBinding configuration, service account secu
Idioma del texto original: inglés
Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.
Idioma del texto original: inglés
Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment
Idioma del texto original: inglés
This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines. It addresses configuring automated code scanning on pull reque...
Idioma del texto original: inglés
Docker Bench for Security is an open-source script that checks dozens of common best practices around deploying Docker containers in production. Based on the CIS Docker Benchmark, it audits host confi
Idioma del texto original: inglés
Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.
Idioma del texto original: inglés
Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.
Idioma del texto original: inglés
Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets. Using tools
Idioma del texto original: inglés
Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that detects vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati
Idioma del texto original: inglés
Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
Idioma del texto original: inglés
This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN p...
Idioma del texto original: inglés
Secure Helm chart deployments by validating chart integrity, scanning templates for misconfigurations, and enforcing security contexts in Kubernetes releases.
Idioma del texto original: inglés
This skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and...
Idioma del texto original: inglés
Skill: tl-terraform
Idioma del texto original: inglés
Fabric pattern - create_markmap_visualization
Idioma del texto original: inglés
Fabric pattern - extract_insights_dm
Idioma del texto original: inglés