Skill UI

Automates Vault Secrets Integrator guidance for DevOps Advanced tasks, covering kubernetes, terraform, CI/CD, monitoring, and infrastructure as code best practices to deliver validated configs and code.

Automated guidance for YAML configuration validation tasks within the DevOps Basics domain, covering version control, containers, CI/CD, and infrastructure fundamentals while producing production-ready code and configurations.

A comprehensive development tool for building and managing enterprise-grade transactional email systems. It supports modern React Email and MJML templates, generating production-ready code for major providers like Resend, Postmark, and SendGrid. Key features include multi-provider integration, internationalization (i18n), dark mode, spam score optimization, and advanced analytics tracking. Ideal for setting up new products or migrating legacy email infrastructure.

Comprehensive guide and expert assistance for building, refactoring, and validating AWS cloud infrastructure using the AWS Cloud Development Kit (CDK). Covers best practices for TypeScript and Python, including resource naming conventions, Lambda function development, and multi-layer pre-deployment validation using tools like cdk-nag.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

This skill guides the implementation of automated security scanning for Infrastructure as Code (IaC) templates using industry-leading tools like Checkov and tfsec. It focuses on integrating security checks into CI/CD pipelines to detect misconfigurations (e.g., public buckets, open ports) in Terraform, CloudFormation, and Kubernetes manifests before they reach production, thereby enforcing policy-based governance and securing the development lifecycle.

This skill demonstrates how to use Trivy, an open-source security scanner, to perform comprehensive container security assessments. It scans container images, Kubernetes manifests, and Infrastructure as Code (IaC) files for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues. Key features include generating Software Bill of Materials (SBOM) for supply chain transparency and integrating scanning gates into CI/CD pipelines, supporting robust DevSecOps practices.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

This comprehensive guide provides step-by-step instructions for setting up a development environment to use AWS CDK (Cloud Development Kit) with Python. It covers installing prerequisites (Node.js, AWS CLI), initializing a CDK project, managing Python dependencies, and mastering the full deployment workflow, enabling users to define and deploy scalable AWS infrastructure as code.