Skill UI

Conduct comprehensive, offensive security assessments across major cloud environments, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill simulates real-world attacks, covering reconnaissance, authentication bypass, resource enumeration, privilege escalation, and data extraction to identify critical misconfigurations and vulnerabilities in cloud infrastructure.

A comprehensive, multi-phase workflow designed for Infrastructure as Code (IaC) using Terraform. It guides users through provisioning cloud resources, creating reusable modules, managing complex state, handling multi-environment deployments, and integrating robust CI/CD pipelines and security practices. Ideal for establishing scalable, repeatable, and auditable cloud infrastructure.

This comprehensive guide provides advanced troubleshooting workflows for complex, microservices-based environments running on Kubernetes. It covers diagnosing issues like CrashLoopBackOff, cascade failures, resource pressure (CPU/Memory), and detailed Redis state analysis, ensuring systematic root cause identification across multiple services.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

This advanced workflow automates the process of analyzing the operational health of specific Azure resources. It ingests and analyzes raw logs, telemetry data, and performance metrics from diverse Azure services (e.g., VMs, Web Apps, Databases). The system performs comprehensive root cause analysis, classifies issues (Critical, High, Medium), and generates actionable, step-by-step remediation plans, significantly reducing manual troubleshooting time.

This skill analyzes Azure resource groups in depth, identifying all resources, their configurations, and complex interdependencies. It maps relationships—including network connections, data flows, and managed identities—to generate comprehensive, detailed Mermaid architecture diagrams. Use this when you need a clear, structured visualization and full documentation of an Azure environment's topology.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

KubeSphere Core acts as the central operating system for cloud-native application management built on Kubernetes. It provides essential functions, including API aggregation, multi-cluster routing, and multi-tenant separation. It manages core resources and simplifies complex cloud-native deployment and operation tasks.

A comprehensive guide for optimizing query latency in Qdrant. This resource explains advanced performance tuning techniques, focusing on critical resource management like RAM utilization, segment count adjustments, and HNSW parameter tuning. It details strategies for scaling, quantization, and hardware considerations (e.g., local NVMe) to ensure consistently low-latency search performance, and outlines common pitfalls to avoid.