Skill UI

Provides expert AWS architecture, security, and implementation guidance backed by MCP tooling, helping teams choose services, migrate workloads, and troubleshoot production issues.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

Automates cloud security posture assistance within the Security Advanced domain, guiding practitioners through best practices, compliance checks, threat modeling, and prod-ready configurations whenever they mention cloud security posture.

Provides expert cloud database administration guidance across multi-cloud platforms, covering automation, reliability engineering, performance tuning, security, and disaster recovery best practices for teams managing modern data estates.

This skill provides expert knowledge on handling secure file uploads and managing cloud storage systems like AWS S3 and Cloudflare R2. It covers critical best practices such as using presigned URLs, implementing multipart uploads, optimizing images, and preventing common security vulnerabilities (e.g., path traversal, magic byte validation) to ensure data integrity and system resilience when dealing with large files.

This comprehensive skill covers the full scope of Firebase services, including Authentication, Firestore, Cloud Functions, and Hosting. It goes beyond basic implementation, focusing on critical architectural principles: adopting a query-first, denormalized NoSQL mindset. Key insights include mandatory security rule design, optimal data modeling for performance, and correctly utilizing modular SDKs to build scalable and secure backends.

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

Manages Firebase/Firestore CRUD, queries, batch jobs, and security for applications while extending to A2A agent messaging, MCP server integration, and Cloud Run coordination for advanced workflows.

Generate production-ready Google Cloud code examples across ADK agents, Genkit workflows, Vertex AI, and Gemini multimodal patterns, complete with IaC, monitoring, security, and deployment guidance for turnkey execution.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

Defines enterprise-grade role-based access control for Guidewire InsuranceSuite, covering API roles, user permissions, and security policies to secure cloud deployments and policy workflows.

Provides enterprise reference architecture patterns for Guidewire InsuranceSuite Cloud deployments, guiding system design, integration choices, security hardening, and scalability plans for production and multi-environment setups.