Skill UI

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

This specialized, end-to-end workflow guides the deployment of applications onto Kubernetes clusters. It systematically covers all critical production phases, including Docker container preparation, generating K8s manifests, structuring applications with Helm charts, configuring advanced service meshes (like Istio), enforcing robust security policies (RBAC, NetworkPolicy), and implementing full observability and GitOps pipelines for reliable, scalable deployments.

Guides Kubernetes operators through workload design, manifest generation, security hardening, networking, storage, GitOps, and multi-cluster operations while ensuring probes, resource limits, and least-privilege policies.

Helps Claude manage Kubernetes network policies and firewall rules by generating or updating YAML configurations based on infrastructure needs, ensuring secure pod-to-pod communication and compliance with least-privilege principles.

This skill provides comprehensive guidance on achieving PCI DSS (Payment Card Industry Data Security Standard) compliance. It covers best practices for designing, implementing, and auditing secure payment processing systems, including network protection, data encryption, tokenization, and adhering to strict data minimization policies.

This skill provides comprehensive guidance and PowerShell scripts for hardening Windows endpoints using Microsoft Defender for Endpoint (MDE). It covers advanced features like Attack Surface Reduction (ASR) rules to block common attack techniques, Controlled Folder Access for ransomware protection, and Network Protection. Use this for deploying enterprise-grade, compliance-required security policies via Intune or Group Policy.

This guide details the comprehensive deployment of Palo Alto Networks Prisma Access for implementing a modern SASE-based Zero Trust Network Access (ZTNA). It covers configuring the cloud infrastructure, deploying ZTNA Connectors, defining granular application policies, enforcing device posture via Host Information Profile (HIP), and utilizing GlobalProtect agents for secure, enterprise-grade remote access.

This skill provides comprehensive guidance on implementing robust network security controls in Kubernetes using Calico's CNI capabilities. Learn to define and audit NetworkPolicy and GlobalNetworkPolicy resources to achieve zero-trust microsegmentation, restrict egress traffic, and control all pod-to-pod communications, ensuring compliance and enhanced security posture.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.

Provides comprehensive guidelines for securing CoreWeave cloud deployments on Kubernetes. Covers critical security areas including credential management, implementing Role-Based Access Control (RBAC), enforcing network isolation policies, and handling sensitive secrets for ML model access. Essential for hardening GPU workloads and protecting data in cloud environments.

This skill provides comprehensive guidance on implementing robust data governance and security guardrails within Snowflake. It covers advanced features such as network rules, mandatory authentication policies (MFA, Key Pair), session timeouts, and statement-level controls. Use this when enforcing strict security policies, achieving regulatory compliance, or structuring robust data access controls for a Snowflake environment.

This guide details essential security best practices for Snowflake data warehouses. It covers implementing network policies, managing key rotation, enabling Multi-Factor Authentication (MFA), and securing credentials using secret managers. Use this comprehensive resource to audit security configurations, restrict network access, and enforce least-privilege access within your Snowflake environment.