Skill UI

A comprehensive runbook for standardizing incident response to Deepgram production issues. It guides users through automated triage (checking status, API connectivity, and model performance), severity classification (SEV1-SEV4), and implementing mitigation strategies, including building fallback services and replaying failed requests to ensure business continuity during outages or degradation.

A comprehensive collection of patterns and best practices for automating GitHub workflows using advanced AI models. This skill enables automated PR reviews, sophisticated issue triage (labeling and commenting), and seamless integration of AI into CI/CD pipelines, significantly enhancing DevOps efficiency and code quality assurance.

This comprehensive runbook guides incident response for Groq API failures. It covers triage steps, severity classification (P1-P4), troubleshooting decision trees (e.g., handling 429 errors or 5xx outages), and implementing immediate mitigations like model fallback or key rotation. Use this when responding to Groq outages to restore service stability.

This comprehensive skill profile models an expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. It covers multi-cloud environments (AWS, Azure, GCP), advanced concepts like Zero Trust, Service Mesh (Istio), and high-availability design. Key capabilities include implementing IaC (Terraform), load balancing, DNS management, and deep network troubleshooting. Ideal for complex DevOps, SRE, or infrastructure design roles.

A comprehensive guide to optimizing cloud expenditure on the Vercel platform. It details how to understand the Fluid Compute pricing model, identify key cost drivers (such as function execution time, bandwidth, and middleware invocations), and implement best practices like edge caching, memory right-sizing, and aggressive asset caching. Use this when analyzing high Vercel billing, implementing cost controls, or managing a SaaS budget.

This guide details the implementation of Microsoft's Enhanced Security Admin Environment (ESAE) tiered model for Active Directory. It covers best practices for establishing Tier 0/1/2 separation, deploying Privileged Access Workstations (PAWs), and designing robust access control policies. Ideal for security architects and compliance officers seeking to meet stringent standards like NIST 800-53.

This guide details how to implement Google's BeyondCorp Zero Trust Access Model. It moves beyond traditional network perimeters by enforcing identity-aware access controls using IAP, Access Context Manager, and device posture verification. Ideal for securing remote and hybrid workforces migrating to Google Cloud.

This skill guides the design and implementation of security zones and conduits for Industrial Automation and Control Systems (IACS) following IEC 62443-3-2 standards. It covers risk-based zone partitioning, defining security levels (SL-T), deploying microsegmentation using industrial firewalls, and validating the architecture against the Purdue Model.

This tool implements network segmentation based on the Purdue Enterprise Reference Architecture (PERA). It helps secure Industrial Control Systems (ICS) by mapping assets and data flows to specific Purdue levels (0-5), defining necessary firewall rules, and establishing DMZs. It ensures strict traffic control between IT and OT domains, adhering to standards like IEC 62443 and facilitating secure network retrofitting.

Conduct comprehensive security assessments for Operational Technology (OT) networks, including SCADA and DCS systems. This skill maps industrial protocols (Modbus, DNP3, OPC UA) and analyzes traffic against the Purdue Model. It is crucial for identifying IT/OT convergence risks, detecting misconfigurations, and ensuring compliance with standards like IEC 62443.

This skill provides comprehensive guidance on hardening and securing critical process historian servers (e.g., OSIsoft PI, Honeywell PHD) operating within Operational Technology (OT) environments. It covers best practices for network placement across the Purdue Model, implementing robust access controls, establishing secure data replication architectures through DMZs (using data diodes), preventing SQL injection, and maintaining data integrity for safety-critical and regulatory reporting purposes. It is essential for minimizing cyber risks in industrial control systems.

This advanced code review skill forces genuine perspective shifts by employing three hostile reviewer personas: the Saboteur (production breaks), the New Hire (maintainability), and the Security Auditor (OWASP-informed). It ensures that all code reviews are critically rigorous, eliminating superficial "Looks Good To Me" approvals and catching blind spots missed by the original author or general AI models. Use it before merging a PR for maximum confidence.