Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

A comprehensive guide for establishing robust, enterprise-grade access control within Databricks. Covers implementing Single Sign-On (SSO) via SCIM, leveraging Unity Catalog for fine-grained Role-Based Access Control (RBAC), defining cluster policies, and enforcing data governance measures like Row-Level Security (RLS) and column masking. Essential for large-scale, secure data platforms.

This skill provides expert-level diagnostic capabilities for complex distributed systems. It specializes in analyzing production incidents, identifying deep root causes, and designing comprehensive observability solutions. Use this when investigating recurring errors, reviewing system logs/traces, and implementing preventative reliability measures.

A comprehensive checklist for securely deploying and validating applications using Firecrawl's core APIs (scrape, crawl, map, extract) in a production environment. It covers critical areas including secure credential management, implementing crawl safety limits, robust error handling (rate limits, authentication failures), establishing monitoring alerts, and executing necessary rollback procedures.

This utility facilitates the end-to-end deployment of Guidewire integrations to the Cloud Platform. It manages the full release lifecycle, including building configuration packages using Gradle, uploading to the Guidewire Cloud Console (GCC), and promoting deployments through various environments (dev, staging, prod). It supports advanced features like zero-downtime releases and robust rollbacks.

An expert architect specializing in designing, implementing, and managing complex hybrid and multi-cloud environments. Expertise spans major public clouds (AWS, Azure, GCP), private clouds (OpenStack, VMware), and container platforms (Kubernetes). Focus areas include cross-cloud networking, Infrastructure as Code (IaC) using Terraform, workload optimization, zero-trust security implementation, and FinOps cost management.

A comprehensive guide covering advanced traffic routing and management techniques within a service mesh using Istio. Learn how to implement critical deployment strategies like Canary releases and Blue-Green deployments, configure circuit breakers, manage retries, and perform fault injection testing. Includes YAML templates for VirtualService, DestinationRule, and Gateway setup, essential for reliable production service deployments.

This skill provides comprehensive guidance and tools for end-to-end software release management. It automates critical tasks such as generating changelogs from conventional commits, determining semantic version bumps (Major/Minor/Patch), assessing release readiness, and planning complex deployment workflows (e.g., Git Flow). Ideal for teams adopting robust DevOps practices.

A structured framework for managing production outages using Sentry. This guide walks users through classifying incident severity (P0-P3), performing deep triage using stack traces and breadcrumbs, and executing API-based queries to pinpoint root causes and measure impact. Essential for DevOps and SRE teams during critical incident response.

This comprehensive checklist guides the secure deployment and hardening of a Supabase project for production use. It covers critical security measures such as enforcing Row Level Security (RLS), separating client and service keys, optimizing connection pooling via Supavisor, setting up Point-in-Time Recovery (PITR) backups, and configuring network restrictions. Use this guide before launching or for conducting security audits to ensure maximum stability and security.