Skill UI

This comprehensive runbook guides incident response for Groq API failures. It covers triage steps, severity classification (P1-P4), troubleshooting decision trees (e.g., handling 429 errors or 5xx outages), and implementing immediate mitigations like model fallback or key rotation. Use this when responding to Groq outages to restore service stability.

A comprehensive runbook for rapid incident response concerning Ideogram API outages, authentication failures, and performance degradation. It provides detailed triage scripts, decision flows based on HTTP status codes (401, 429, 5xx), immediate mitigation actions (e.g., enabling fallback mode), and structured templates for communication and postmortems.

A comprehensive operational runbook for managing outages and errors related to Mistral AI integrations. It provides structured procedures, including severity classification, quick API health checks, decision trees for common errors (401, 429, 5xx), immediate mitigation steps, and post-incident evidence collection and reporting.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

This tool guides the creation of comprehensive, standardized incident response playbooks aligned with industry standards like NIST SP 800-61r3 and SANS PICERL. It structures playbooks covering detection, containment, eradication, recovery, and post-incident activities, including decision trees, RACI matrices, and seamless integration pathways for SOAR platforms. Ideal for maturing an organization's security posture and ensuring compliance.

This skill guides the comprehensive evaluation and selection of Threat Intelligence Platforms (TIPs). It assesses vendor capabilities, including STIX/TAXII support, workflow automation, SIEM/SOAR integration, and total cost of ownership. It is essential for procurement decisions, migrating between TIP solutions, or assessing whether the current CTI program meets required maturity levels.

This guide provides a systematic, step-by-step workflow for Security Operations Center (SOC) analysts to perform alert triage using Elastic Security SIEM. It covers initial alert assessment, context gathering using advanced ES|QL queries, threat intelligence enrichment, and final classification decisions (True Positive, False Positive, etc.) to rapidly determine genuine security threats and prioritize incident response actions.

Provides a structured, comprehensive playbook for managing high-impact ransomware incidents. It guides the response team through initial detection, immediate network containment, detailed damage assessment, recovery decision making (including legal and financial considerations), and secure system restoration. Essential for cybersecurity teams facing active encryption attacks.

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.

A comprehensive runbook for rapid incident response to Figma REST API failures. It guides users through quick triage (checking status, authentication, rate limits), decision-making based on error codes (403, 429, 500), applying immediate mitigation strategies (token rotation, fallback modes), and completing thorough postmortem documentation.

A comprehensive runbook for diagnosing and resolving outages, degradation, and rate-limiting issues when using the Claude API. It provides structured triage steps, decision trees, and mitigation strategies for P1 through P4 severity incidents, ensuring minimal downtime and stable API interaction.

This skill provides a deep dive into optimizing Oracle Cloud Infrastructure (OCI) resources. It guides users through selecting appropriate compute shapes (e.g., E5.Flex, A1.Flex) and understanding the performance tiers for block volumes (Balanced, Ultra High Performance). Users can programmatically query available shapes, create performance-tuned volumes, and monitor real-time IOPS and network bandwidth using the OCI SDK, ensuring optimal infrastructure decisions for any workload.