Skill UI

Automates S3 bucket policy generation within AWS, offering step-by-step guidance, safeguards best practices, and produces production-ready configurations for compute, storage, networking, and serverless scenarios.

Automates guidance on setting up and verifying AWS S3 lifecycle configurations, delivering best-practice steps, reusable templates, and validation for storage automation tasks.

Automates AWS SAM template building with best-practice guidance, production-ready code/config generation, validation, and coverage for compute, storage, networking, and serverless patterns when a user requests help with the SAM template builder.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Guides AWS users through generating secure security group configurations with best practices, automating code and configuration creation plus validation across compute, storage, and networking scenarios.

This comprehensive toolkit provides end-to-end DevOps automation capabilities. It scaffolds CI/CD pipelines (GitHub Actions, CircleCI), generates robust Infrastructure as Code (IaC) modules using Terraform for major clouds (AWS, GCP, Azure), and manages complex Kubernetes deployments (Blue/Green, Rolling). Ideal for automating infrastructure setup, application deployment, and drift management in multi-cloud environments.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.

Automates AWS SQS queue setup by guiding users through best-practice architecture, configuration, and code output, triggering whenever someone asks about queue creation or patterns.

Offers automated AWS Step Functions workflow support, triggering on relevant requests to guide users through common patterns, best practices, and production-ready code plus configuration snippets validated against standards.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

This skill provides expert guidance on creating, reviewing, and managing production-grade AWS infrastructure using Terraform. It focuses on best practices for reusable module design, robust remote state management (S3 + DynamoDB), and adhering to modern HashiCorp Configuration Language (HCL) patterns like using 'for_each'. Ideal for teams building or auditing complex, scalable AWS environments.