Skill UI

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

This guide provides a comprehensive framework for minimizing cloud expenditure on Databricks. It covers identifying cost drivers via system billing tables, implementing cluster policies, utilizing spot instances for batch processing, right-sizing SQL warehouses, and automating the shutdown of idle development clusters. Use it when managing cloud spending or optimizing data platform usage.

A comprehensive guide for managing secrets and environment variables throughout the entire development lifecycle, from local development to production. This skill covers secret leak auditing (detecting committed credentials), implementing robust rotation workflows, and integrating with industry-leading secret stores like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. Essential for hardening CI/CD pipelines and ensuring compliance.

This tool guides the creation of comprehensive, standardized incident response playbooks aligned with industry standards like NIST SP 800-61r3 and SANS PICERL. It structures playbooks covering detection, containment, eradication, recovery, and post-incident activities, including decision trees, RACI matrices, and seamless integration pathways for SOAR platforms. Ideal for maturing an organization's security posture and ensuring compliance.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.

This skill teaches the comprehensive process of developing precise YARA rules for malware detection. It covers techniques such as identifying unique byte patterns, analyzing strings, and inspecting PE file headers to create robust signatures. Ideal for security analysts performing threat hunting, incident response, and security auditing.

A comprehensive guide and toolkit for Amazon Aurora DSQL, a serverless, PostgreSQL-compatible distributed SQL database. Covers advanced topics including schema management, multi-tenant patterns, complex DDL migrations (e.g., column operations, constraint changes), migration from MySQL, IAM authentication, and detailed query plan analysis (EXPLAIN ANALYZE). Use this skill for full lifecycle database development.

This skill guides the secure configuration of Figma API access across development, staging, and production environments. It details best practices for managing separate API tokens (PATs), file keys, and cache settings. The focus is on implementing robust environment guards and utilizing secret management solutions to prevent cross-environment data leakage and accidental operations.

This guide provides a comprehensive strategy for configuring Klaviyo across development, staging, and production environments. It covers best practices for using separate API keys, implementing robust environment detection logic (like reading NODE_ENV), and utilizing secret management solutions (AWS/GCP/Vault). Crucially, it teaches how to implement 'guards' to prevent accidental real-world actions, such as sending live emails or deleting data, in non-production environments, ensuring data integrity and smooth CI/CD deployment.

This guide provides comprehensive best practices for configuring Palantir Foundry integrations across development, staging, and production environments. It details how to manage environment-specific credentials, hostnames, and scope policies using structured Python code and platform-specific deployment manifests (Docker Compose, Kubernetes, gcloud). Use this skill when implementing resilient, multi-tier SaaS deployments that require strict credential and configuration separation.

A comprehensive guide for simulating a full Software Development Life Cycle (SDLC) using specialized AI roles. It defines protocols for managing cross-functional teams (Dev, QA, DevOps, Product), covering sprint planning, codebase management, bug tracking, and deployment, ensuring context survival across multiple chat sessions.