Skill UI

Automates the creation of Ansible playbooks in advanced DevOps workflows by triggering whenever users mention the generator and offering best-practice guidance, production-ready code, and validation for IaC, Kubernetes, Terraform, and CI/CD stacks.

Guides multi-step deliveries by linking Antigravity skills into workflows for SaaS MVP launches, security audits, AI agent systems, and browser QA, recommending best-fit playbooks and verifying each artifact.

Guides multi-step deliveries by linking Antigravity skills into workflows for SaaS MVP launches, security audits, AI agent systems, and browser QA, recommending best-fit playbooks and verifying each artifact.

Transforms detailed user requirements into secure, production-ready Ansible playbooks that automate server configuration, software deployments, and infrastructure workflows across multiple platforms for repeatable DevOps operations.

A comprehensive toolkit for advanced debugging and systematic incident response within Customer.io. It provides structured playbooks, API debug clients, and investigation scripts to diagnose complex delivery issues, analyze user profiles, or troubleshoot campaign failures, ensuring robust incident management.

Guides teams through the security incident response lifecycle by classifying attacks, generating containment/remediation playbooks, directing evidence collection, and coordinating post-incident follow-up to minimize damage.

Functions as a Chief Security Architect assistant that performs STRIDE/PASTA threat modeling, OWASP checks, Red/Blue team simulations and incident response playbooks to harden any project before production.

This guide teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous, comprehensive threat detection across entire AWS accounts and workloads. It covers enabling protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting various finding severity levels, and building robust, automated incident response playbooks using EventBridge and AWS Lambda for immediate containment actions.

This skill automates the entire phishing incident response lifecycle using the Splunk SOAR REST API. It processes reported emails, extracts indicators of compromise (IOCs) like URLs and IPs, creates incident containers, attaches artifacts, and triggers automated playbooks for deep analysis and reporting. It is essential for security operations teams needing robust, programmatic incident handling and compliance alignment.

This guide details how to implement sophisticated Security Orchestration, Automation, and Response (SOAR) playbooks using Palo Alto Cortex XSOAR. It demonstrates full lifecycle automation, such as phishing incident investigation, requiring enrichment of URLs, IPs, and files, followed by automated containment actions (e.g., blocking senders, purging mailboxes). Mastering this allows SOC teams to drastically reduce Mean Time To Respond (MTTR) by automating detection, analysis, and remediation steps across multiple security tools.

This skill maps observed adversary behaviors, security alerts, and detection rules to the MITRE ATT&CK framework. It is essential for quantifying detection coverage, building ATT&CK heatmaps, tagging SIEM alerts, and prioritizing security controls based on known threat actor playbooks. Use it for comprehensive gap analysis and risk reporting.

This comprehensive runbook provides structured procedures for diagnosing and responding to critical failures when integrating with the Grammarly API. It covers various incident types, including full API outages, OAuth token expiration, rate limit storms, and suggestion quality degradation. The guide includes severity classification, diagnostic `curl` commands, detailed playbooks, and post-incident documentation steps to ensure service resilience and minimal downtime.