Skill UI

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

This comprehensive guide provides expertise in conducting ISO 13485 internal audits for medical device Quality Management Systems (QMS). It covers the full audit lifecycle, including risk-based planning, systematic evidence collection, classifying nonconformities (Major/Minor), and managing CAPA verification to ensure regulatory compliance and continuous improvement.

This skill provides comprehensive guidance and tools for end-to-end software release management. It automates critical tasks such as generating changelogs from conventional commits, determining semantic version bumps (Major/Minor/Patch), assessing release readiness, and planning complex deployment workflows (e.g., Git Flow). Ideal for teams adopting robust DevOps practices.

A comprehensive guide for implementing ISO 14971:2019 risk management across the entire medical device lifecycle. Covers planning, hazard identification, risk analysis (FMEA, FTA), risk evaluation, risk control, and post-market surveillance. Essential for achieving regulatory compliance in medical device development.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

This guide provides comprehensive methods for load testing and capacity planning of Vercel serverless deployments. Learn how to use professional tools like k6 and autocannon to simulate realistic traffic spikes, measure latency (P95, P99), analyze cold start impact, and tune concurrency settings (Fluid Compute) to ensure optimal application performance and scalability under heavy load.

This specialized skill acts as an expert AI auditor for Food Safety Modernization Act (FSMA) compliance. It is designed to review critical records, including HACCP plans, Preventive Controls, and Supply Chain documentation for food processing facilities. Use it to simulate FDA inspections, identify compliance gaps (such as missing CCPs or inadequate corrective actions), and receive actionable guidance to ensure the highest standards of food safety.

This guide outlines the process of passive external reconnaissance using Open Source Intelligence (OSINT) techniques. Users can map an organization's digital footprint by gathering comprehensive data, including DNS records, subdomains, certificate transparency logs, social media profiles, and leaked credentials. It is critical for the planning phase of penetration testing, asset mapping, or preparing for social engineering, all without actively interacting with target systems.

This skill guides the creation of a foundational red team engagement plan. It covers defining the scope, establishing detailed Rules of Engagement (ROE), selecting MITRE ATT&CK-aligned threat profiles, and defining operational timelines. It is essential for conducting large-scale, assumed-breach, or objective-based offensive security testing.

This skill detects persistence mechanisms by monitoring Windows startup directories for suspicious file creation (T1547.001). It utilizes real-time file system monitoring via Python watchdog, cross-references Autoruns entries, and analyzes file metadata to identify implants that survive system reboots. Essential for threat hunting and validating security monitoring coverage.

This tool implements robust network segmentation based on the Purdue Enterprise Reference Architecture (PERA) model. It helps designers map and secure Industrial Control Systems (ICS) and SCADA networks into hierarchical security zones (Levels 0-5). It enforces strict data flow control and establishes the critical IT/OT DMZ (Level 3.5), adhering to IEC 62443 standards. Ideal for retrofitting or designing resilient industrial networks.

A comprehensive guide and workflow for digital forensic investigators to analyze ransomware artifacts. This process involves preserving volatile evidence (memory dumps), identifying the ransomware variant from file extensions and ransom notes, establishing the attack timeline using Prefetch and Event Logs, and extracting critical Indicators of Compromise (IoCs) such as Bitcoin addresses and Tor sites. Essential for incident response and recovery planning.