Skill UI

Guides the implementation of Kubernetes Pod Security Standards (PSS) using the Pod Security Admission (PSA) controller. This process involves labeling namespaces with security profiles (Privileged, Baseline, Restricted) and enforcing policies via 'enforce', 'audit', or 'warn' modes. It is crucial for hardening container workloads, migrating away from deprecated PodSecurityPolicy, and ensuring compliance at the namespace level.

This skill provides guidelines and mechanics for managing multi-tenant environments within KubeSphere. It focuses on the controlled creation and configuration of core resources—including workspaces, projects, and users—while strictly adhering to least privilege principles. It details the proper use of RBAC roles (Viewer, Regular, Admin) and guides users through the process of setting up organizational boundaries and access controls for secure, scalable deployment.

A powerful, kubectl/docker-style CLI tool designed to manage and submit distributed computing jobs on the Qizhi (启智) platform. Use it for tasks like logging in, checking resource availability, discovering workspaces, and submitting complex GPU, CPU, or batch jobs efficiently.

A comprehensive guide covering expert techniques for breaking out of container isolation. This playbook details methods for exploiting privileged modes, abusing cgroups, manipulating namespaces, and leveraging vulnerabilities in Docker or Kubernetes environments. Essential for advanced security research and penetration testing.

This skill provides comprehensive operations for managing NodeGroup resources. It allows users to query, create, update, delete, and manage bindings for nodes, namespaces, and workspaces within the edgewize nodegroup environment. Ideal for infrastructure automation, troubleshooting, and API-driven cluster management.

This skill provides comprehensive auditing of Fabric and Power BI tenant settings against a curated governance baseline. It detects configuration 'drift,' enumerates delegated overrides across capacity, domains, and workspaces, and investigates associated Entra security groups. It translates complex API findings into grounded, actionable discussions, helping users understand functional consequences and risks.

A specialized deep-dive skill for analyzing container-to-host escape vulnerabilities. This tool is used after a sandbox orchestrator establishes initial assumptions, focusing on mapping isolation boundaries (namespaces, cgroups, seccomp, capabilities). It helps prove boundary crossings, identify minimal exploit primitives, and determine if an exploit can break out of the container context to the host kernel.