Skill UI

Deploys AWS Security Hub as a centralized CSPM to aggregate GuardDuty, Inspector, Macie, and partner findings, enforce CIS/AWS/PCI standards, and drive automated remediation plus compliance reporting across multi-account AWS estates.

Implementing AWS Security Hub to centralize findings, map CIS/PCI DSS/NIST standards, and automate remediation with EventBridge/Lambda across multi-account environments for clearer compliance dashboards.

Implements Kubernetes Pod Security Standards via Pod Security Admission policies, covering privileged, baseline, and restricted profiles plus enforcement modes for deploying secure namespaces and workloads in clusters that require compliance and risk control.

Use OPA Gatekeeper as a Kubernetes admission controller to enforce policy-as-code via ConstraintTemplates, Rego rules, and Constraints so clusters validate, mutate, or deny workloads that violate organizational standards.

Guide for writing YAML-based Semgrep rules to detect app-specific vulnerabilities, enforce coding standards, and plug into CI/CD for continuous SAST assurance across multiple languages.

This tool performs deep security assessments on SOAP web services. It analyzes WSDL definitions and actively tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security misconfigurations, and SOAPAction spoofing. It is essential for securing complex, enterprise-level APIs and ensuring adherence to industry security standards.

Hardens managed EKS, AKS, and GKE clusters by enforcing Pod Security Standards, network policies, RBAC scoping, image admission controls, workload identity, and runtime monitoring for cloud-specific IAM integrations.

This skill provides a comprehensive framework for validating the integrity and recoverability of critical data backups. It goes beyond simple file checks by implementing cryptographic hash verification (SHA-256), simulating automated restore tests in isolated environments, detecting silent data corruption (bit rot), and scanning for signs of ransomware artifacts. It is crucial for ensuring data reliability against cyberattacks and hardware failures, adhering to standards like NIST CSF.

Guides building production-ready user interfaces with thoughtful component architecture, consistent spacing, typography, color, and accessibility standards while avoiding generic AI aesthetics and over-configured patterns.

This guide teaches how to build well-structured and robust ASP.NET Minimal APIs. It covers best practices for API organization, defining clear DTOs with proper validation, handling strongly-typed parameters, and leveraging modern C# features. Crucially, it demonstrates how to generate comprehensive, standards-compliant OpenAPI/Swagger documentation using built-in .NET features, ensuring APIs are fully documented for seamless consumption.

Copilot Spaces allow users to consolidate and manage project-specific knowledge, including documentation, code snippets, architectural standards, and operational instructions. By loading a Space, Copilot grounds its responses not just on general knowledge, but on the curated, authoritative context of the entire project, enabling accurate Q&A, code generation, and workflow execution based on team standards. Ideal for onboarding, large-scale projects, and maintaining consistency.

This guide outlines comprehensive best practices for documenting C# APIs using XML comments. It provides detailed rules for writing summaries, documenting parameters, return values, constructors, properties, and handling exceptions. Following these standards ensures that C# codebases are highly maintainable, readable, and easily understood by other developers.