Skill UI

This skill provides comprehensive monitoring capabilities for GPU instances running on Vast.ai. It collects key metrics including GPU utilization, instance uptime, temperature, and accumulated costs. Use this when setting up operational monitoring dashboards, configuring critical alerts (e.g., idle GPUs, high temperature, budget overruns), or automating resource usage tracking in a cloud computing environment.

This skill enables comprehensive audit logging for Windsurf Enterprise deployments. It covers tracking of AI interactions, file access events, authentication changes, and overall configuration modifications. It is essential for maintaining strict compliance standards and performing detailed security audits, particularly when the user mentions audit or compliance keywords.

This skill manages the integration of Model Context Protocol (MCP) servers with Windsurf, significantly extending its operational capabilities. It enables Windsurf to interact with external resources, including databases, file systems, APIs, and custom tools through a standardized protocol. Use this when configuring or utilizing advanced, external tool integrations within the Windsurf environment.

This guide details the implementation of robust web application logging using ModSecurity WAF and the OWASP Core Rule Set (CRS). It covers configuring audit logging, tuning rules to minimize false positives, and analyzing logs for advanced attack detection. The process ensures that security controls are established, providing critical forensic data for SIEM integration and compliance.

This skill provides a comprehensive methodology for simulating privilege escalation attacks on compromised Linux and Windows environments. It guides the user through identifying vectors—including SUID abuse, misconfigured services, kernel vulnerabilities, cron job exploitation, and credential harvesting—to elevate initial low-privilege access to root or SYSTEM control. It is crucial for deep-dive penetration testing and assessing system security hardening.

This guide details advanced techniques used in red teaming and penetration testing to elevate user privileges from a low-level account to root access on a compromised Linux system. It covers exploiting misconfigurations, vulnerable services (like SUID/SGID binaries), improper sudo rules, kernel vulnerabilities (e.g., Dirty Pipe), and abuse of system services like Cron jobs and Systemd. Essential for authorized security assessments.

This skill analyzes Azure resource groups in depth, identifying all resources, their configurations, and complex interdependencies. It maps relationships—including network connections, data flows, and managed identities—to generate comprehensive, detailed Mermaid architecture diagrams. Use this when you need a clear, structured visualization and full documentation of an Azure environment's topology.

A comprehensive guide to optimizing CAST AI's core performance metrics, including node provisioning speed, autoscaler responsiveness, and API call efficiency. This skill covers techniques like configuring headroom, selecting optimal instance families, tuning evictors, and implementing caching for multi-cluster dashboards to ensure high availability and cost efficiency in cloud environments.

A quick reference guide for diagnosing and resolving common runtime and deployment errors encountered on the Fly.io platform. Covers issues such as health check failures, image build failures, machine startup issues, and connection refusals, providing specific diagnostic commands and configuration fixes.

A comprehensive guide to implementing Role-Based Access Control (RBAC) in ClickHouse. Learn how to manage user authentication, define hierarchical roles, enforce row-level security (RLS) for tenant isolation, restrict data access via column-level grants, and manage resource consumption using quotas and settings profiles. Essential for multi-tenant SaaS and secure data analytics platforms.

This guide outlines best practices for configuring and securing Adobe API access across Development, Staging, and Production environments. It details the use of separate Developer Console projects, implementing least-privilege OAuth scopes, and integrating robust secret management solutions (GCP Secret Manager, AWS Secrets Manager, HashiCorp Vault) into CI/CD pipelines for secure, scalable deployments.

A comprehensive checklist guide for deploying Algolia search services to a production environment. It covers critical steps including index configuration (attributes, ranking), securing API keys (admin vs. search-only), setting up replicas for multiple sort orders, implementing monitoring, and defining graceful degradation/fallback mechanisms. Ideal for go-live and major deployments.