Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

Analyzes multi-language dependency ecosystems to surface vulnerabilities, license risks, outdated or redundant packages, supply-chain issues, and lockfile drift while guiding upgrades and compliance.

Manages environment variables and secret hygiene across local and production workflows, offering audit-ready scans, severity-based findings, rotation guidance, and CI-friendly outputs to keep credentials safe before commits or deployments.

This guide details the implementation of robust web application logging using ModSecurity WAF and the OWASP Core Rule Set (CRS). It covers configuring audit logging, tuning rules to minimize false positives, and analyzing logs for advanced attack detection. The process ensures that security controls are established, providing critical forensic data for SIEM integration and compliance.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

Manages production-grade secret infrastructure, covering Vault clusters, cloud secret stores, auth methods, rotation, and audit patterns to harden DevOps pipelines and respond to leaks.

Analyzes UEFI bootkit persistence mechanisms across firmware implants, ESP tampering, and Secure Boot bypass techniques to guide firmware integrity audits, ESP inspection, and malware investigations.

WizTelemetry Platform Service is the core backend service for KubeSphere's WizTelemetry Observability Platform. It unifies common APIs and provides centralized platform services for collecting, managing, and analyzing multiple types of observability data, including Logging, Auditing, Event Streaming, Tracing, and Notifications. Use this service when setting up or configuring the foundational monitoring layer for a comprehensive, global observability solution within a Kubernetes environment.