Skill UI

Conduct comprehensive, offensive security assessments across major cloud environments, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill simulates real-world attacks, covering reconnaissance, authentication bypass, resource enumeration, privilege escalation, and data extraction to identify critical misconfigurations and vulnerabilities in cloud infrastructure.

A comprehensive guide detailing systematic strategies and patterns for optimizing cloud spending across major platforms including AWS, Azure, and GCP. It covers best practices for rightsizing resources, leveraging reserved instances, implementing lifecycle policies, and setting up robust cost governance, ensuring cost efficiency without sacrificing performance or reliability.

Use this resource to implement comprehensive end-to-end monitoring and observability for Supabase projects. It guides users through analyzing API metrics, diagnosing slow database queries using pg_stat_statements, managing log drains for external aggregation, and setting up custom alerts, ensuring optimal project health and performance.

A comprehensive, multi-phase workflow designed for Infrastructure as Code (IaC) using Terraform. It guides users through provisioning cloud resources, creating reusable modules, managing complex state, handling multi-environment deployments, and integrating robust CI/CD pipelines and security practices. Ideal for establishing scalable, repeatable, and auditable cloud infrastructure.

This skill provides comprehensive monitoring capabilities for GPU instances running on Vast.ai. It collects key metrics including GPU utilization, instance uptime, temperature, and accumulated costs. Use this when setting up operational monitoring dashboards, configuring critical alerts (e.g., idle GPUs, high temperature, budget overruns), or automating resource usage tracking in a cloud computing environment.

This skill manages the integration of Model Context Protocol (MCP) servers with Windsurf, significantly extending its operational capabilities. It enables Windsurf to interact with external resources, including databases, file systems, APIs, and custom tools through a standardized protocol. Use this when configuring or utilizing advanced, external tool integrations within the Windsurf environment.

This comprehensive guide provides advanced troubleshooting workflows for complex, microservices-based environments running on Kubernetes. It covers diagnosing issues like CrashLoopBackOff, cascade failures, resource pressure (CPU/Memory), and detailed Redis state analysis, ensuring systematic root cause identification across multiple services.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.

This advanced workflow automates the process of analyzing the operational health of specific Azure resources. It ingests and analyzes raw logs, telemetry data, and performance metrics from diverse Azure services (e.g., VMs, Web Apps, Databases). The system performs comprehensive root cause analysis, classifies issues (Critical, High, Medium), and generates actionable, step-by-step remediation plans, significantly reducing manual troubleshooting time.

This skill analyzes Azure resource groups in depth, identifying all resources, their configurations, and complex interdependencies. It maps relationships—including network connections, data flows, and managed identities—to generate comprehensive, detailed Mermaid architecture diagrams. Use this when you need a clear, structured visualization and full documentation of an Azure environment's topology.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

KubeSphere Core acts as the central operating system for cloud-native application management built on Kubernetes. It provides essential functions, including API aggregation, multi-cluster routing, and multi-tenant separation. It manages core resources and simplifies complex cloud-native deployment and operation tasks.