Skill UI

This comprehensive workflow provides a complete cycle of quality assurance for software development. It covers every stage from defining the test strategy (TDD, Unit Testing) through integration, E2E testing, browser automation, performance profiling, security scanning, and final code review. Use this when setting up robust testing infrastructure or ensuring production-ready software quality.

Validates PCI DSS compliance by running the pci-dss-validator plugin on codebases or infrastructure configs, then reports violations and remediation steps for developers, security engineers, and compliance officers.

Automates Vault Secrets Integrator guidance for DevOps Advanced tasks, covering kubernetes, terraform, CI/CD, monitoring, and infrastructure as code best practices to deliver validated configs and code.

Automated guidance for YAML configuration validation tasks within the DevOps Basics domain, covering version control, containers, CI/CD, and infrastructure fundamentals while producing production-ready code and configurations.

Comprehensive guide and expert assistance for building, refactoring, and validating AWS cloud infrastructure using the AWS Cloud Development Kit (CDK). Covers best practices for TypeScript and Python, including resource naming conventions, Lambda function development, and multi-layer pre-deployment validation using tools like cdk-nag.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

Master the creation of a two-tier Public Key Infrastructure (PKI) Certificate Authority hierarchy—including an offline Root CA and an operational Intermediate CA. This skill guides you through using OpenSSL and Python cryptography to manage X.509 certificate issuance, configure Certificate Revocation Lists (CRLs), set up OCSP responders, and enforce strict certificate policies. Essential for deploying robust trust anchors for TLS, code signing, or client authentication.

This methodology systematically deobfuscates multi-layered PowerShell malware. It utilizes Abstract Syntax Tree (AST) analysis, dynamic execution tracing, and specialized tools (like PSDecode) to recover hidden payloads, original commands, and C2 infrastructure from scripts obfuscated with Base64, string concatenation, or complex invocation tricks. Essential for incident response and deep malware analysis.

Automate security scanning for Infrastructure as Code (IaC) using best-in-class tools like Checkov and tfsec. This method analyzes Terraform, CloudFormation, and Kubernetes manifests to detect misconfigurations, enforce policy-based governance, and prevent common security vulnerabilities (e.g., public S3 buckets) before deployment. Essential for establishing secure CI/CD pipelines and meeting compliance standards.

Design scalable and cost-effective Azure architectures using Bicep infrastructure-as-code templates. The tool helps gather requirements, recommend patterns, generate IaC templates, optimize costs, and configure CI/CD pipelines for services like AKS, App Service, and Cosmos DB.