Skill UI

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

This skill acts as an SLO (Service Level Objective) expert, specializing in implementing reliability standards and error budget-based engineering practices. It guides the design of comprehensive SLO frameworks, establishment of meaningful SLIs, and creation of monitoring systems. Use this to balance product feature velocity with required service reliability, ensuring all engineering decisions are data-driven and aligned with business objectives.

A comprehensive skill guide for senior PostgreSQL administrators. It covers deep expertise in performance tuning using EXPLAIN ANALYZE, implementing advanced indexing strategies (GIN, GiST), setting up high availability via streaming or logical replication, and maintaining database health through VACUUM and pg_stat monitoring. Essential for optimizing complex, production-grade, and mission-critical database workloads.

Scans codebases for debt, scores severity, tracks trends, produces prioritized remediation plans, and reports progress for engineering teams balancing refactoring with feature delivery.

A powerful tool designed to generate pragmatic CI/CD pipelines by analyzing a project's actual stack (language, runtime, tooling) from its repository files. It automates the creation of foundational pipelines (lint, test, build, deploy) for platforms like GitHub Actions and GitLab CI, ensuring the baseline is reproducible and aligned with existing lockfiles. Ideal for bootstrapping new repositories or migrating existing, brittle pipeline definitions.

Manages environment variables and secret hygiene across local and production workflows, offering audit-ready scans, severity-based findings, rotation guidance, and CI-friendly outputs to keep credentials safe before commits or deployments.

This comprehensive guide provides advanced troubleshooting workflows for complex, microservices-based environments running on Kubernetes. It covers diagnosing issues like CrashLoopBackOff, cascade failures, resource pressure (CPU/Memory), and detailed Redis state analysis, ensuring systematic root cause identification across multiple services.

Guides designing IEC 62443-3-2 compliant OT security zones and conduits, covering risk-based partitioning, Security Level targets, conduit controls, microsegmentation with industrial firewalls, and validating the zone architecture through traffic analysis and testing.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

This guide details the comprehensive process of securing a container registry using Harbor. Learn how to implement advanced security features such as integrated vulnerability scanning (Trivy), image signing (Cosign/Notary), Role-Based Access Control (RBAC), and content trust policies. The workflow covers deployment, policy enforcement, and integrating external authentication like OIDC, ensuring compliant and secure image provenance for Kubernetes environments.

This advanced workflow automates the process of analyzing the operational health of specific Azure resources. It ingests and analyzes raw logs, telemetry data, and performance metrics from diverse Azure services (e.g., VMs, Web Apps, Databases). The system performs comprehensive root cause analysis, classifies issues (Critical, High, Medium), and generates actionable, step-by-step remediation plans, significantly reducing manual troubleshooting time.

Generates HTML5 Canvas-based breadboard mockups and diagrams for retro computing builds, showing component placement, wiring, and labeled 6502/555 timer layouts as visual references or teaching aids.