Skill UI

A comprehensive guide for deploying Apollo.io integrations to production environments. This skill covers robust deployment strategies across multiple cloud platforms, including Vercel, GCP Cloud Run, and Kubernetes. It emphasizes best practices such as implementing health check endpoints, managing secrets using dedicated secret managers, and structuring CI/CD pipelines for reliable, scalable, and secure production rollouts.

A comprehensive guide detailing how to implement declarative, Git-based continuous delivery for Kubernetes. It covers setup using industry-leading tools like ArgoCD and Flux CD, adhering to OpenGitOps principles for automated, reliable, and traceable application deployments and infrastructure management.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

A powerful tool for architecting production-grade multi-agent workflows. It allows users to define complex, multi-step AI pipelines using structured patterns (sequential, parallel, hierarchical). Key features include defining explicit handoff contracts, implementing robust failure handling, and managing context/cost discipline across long-running processes, ensuring reliable and scalable AI system deployment.

This comprehensive guide provides advanced troubleshooting workflows for complex, microservices-based environments running on Kubernetes. It covers diagnosing issues like CrashLoopBackOff, cascade failures, resource pressure (CPU/Memory), and detailed Redis state analysis, ensuring systematic root cause identification across multiple services.

A comprehensive guide and set of scripts to systematically audit AWS S3 buckets for security misconfigurations. This tool identifies publicly exposed data, overly permissive ACLs, inadequate bucket policies, and missing encryption settings, ensuring adherence to least-privilege principles and compliance frameworks like SOC 2 or HIPAA.

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

A comprehensive skill for optimizing Role-Based Access Control (RBAC) structures. It applies advanced data mining techniques, including clustering (k-means, agglomerative) and Formal Concept Analysis (FCA), to analyze existing user-permission assignments. The goal is to discover the minimal set of necessary roles, thereby preventing 'role explosion,' enforcing the least privilege principle, and ensuring robust identity governance for secure systems.

This skill provides a comprehensive guide to deploying a Software-Defined Perimeter (SDP) using the CSA v2.0 specification. It implements core zero trust principles by establishing a dynamic, identity-centric network boundary. The deployment covers Single Packet Authorization (SPA) and mutual TLS (mTLS) to ensure that resources are invisible and inaccessible until a user is fully authenticated and authorized.

A comprehensive guide for security professionals on detecting and preventing ARP spoofing and poisoning attacks. The skill covers multiple layers of defense, including implementing Dynamic ARP Inspection (DAI) on managed switches, utilizing ARPWatch for continuous monitoring, performing deep packet inspection with Wireshark, and developing custom Python scripts for real-time anomaly detection. Essential for mitigating Man-in-the-Middle (MitM) attacks at Layer 2.

A comprehensive guide and workflow for detecting unauthorized data exfiltration from AWS S3 buckets. It details how to leverage multiple AWS services—including CloudTrail, GuardDuty, Amazon Macie, and Athena—to analyze access patterns, identify bulk downloads, and detect cross-account data transfers, ensuring robust cloud compliance and security monitoring.

This skill details how to establish continuous compliance monitoring for AWS resources. It covers deploying managed and custom Config rules aligned with industry standards like CIS and PCI DSS. The workflow includes setting up recording, implementing automated remediation using SSM, and aggregating compliance data across multiple AWS accounts using AWS Organizations. Ideal for security auditing and guardrail deployment.