Skill UI

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

Expert in designing, building, and optimizing scalable data pipelines, modern data warehouses, and real-time streaming architectures. Mastery covers the complete modern data stack, including Spark, dbt, Airflow, and cloud services (AWS, Azure, GCP). Focuses on ELT/ETL, data lakehouse implementation (Delta Lake, Iceberg), data governance, and ensuring high data quality and operational reliability.

A comprehensive runbook providing systematic procedures for responding to Firecrawl API outages and integration failures. It guides technical teams through triage, diagnosis, and mitigation for common issues (e.g., 401, 429, 5xx errors). Includes steps for fallback implementation, evidence collection, and postmortem documentation to ensure rapid service recovery.

A comprehensive guide for safely migrating monolithic or aging codebases. It details incremental modernization strategies, dependency mapping, and the implementation of the Strangler Fig pattern. Learn how to build safety nets using characterization tests, manage rollouts with feature flags, and achieve zero-downtime refactoring to reduce technical debt without business disruption.

This skill guides the implementation of comprehensive, real-time monitoring for APIs. It covers collecting key metrics (latency, error rates, request rate), setting up health and readiness endpoints, building detailed Grafana dashboards, and implementing SLO-based alerting (following the RED method). Use this when you need to ensure API reliability, high availability, and performance in a production environment.

This skill guides the implementation of comprehensive Identity Governance and Lifecycle Management (IGM) processes. It automates the entire employee identity lifecycle—from pre-hire onboarding (Joiner) to role changes (Mover) and termination (Leaver). Key components include Role-Based Access Control (RBAC) provisioning, periodic access recertification, and remediation of orphaned accounts, ensuring compliance with standards like SOX and GDPR.

This comprehensive guide details how to establish AWS Security Hub as a centralized Cloud Security Posture Management (CSPM) platform. It aggregates security findings from multiple AWS services (GuardDuty, Inspector, Macie) and third-party tools. Users can enforce compliance against industry standards (CIS, PCI-DSS, NIST), automate remediation workflows via EventBridge, and generate comprehensive evidence for compliance audits.

Configure Microsoft Entra ID (Azure AD) Conditional Access policies to enforce zero trust access control. This skill covers critical areas such as signal-based policy design, device compliance requirements, risk-based authentication, named locations, and session controls, aligning with NIST SP 1800-35. Essential for deploying, hardening, or assessing robust Azure AD security architecture.

This skill guides the deployment and implementation of Breach and Attack Simulation (BAS) platforms. It provides a continuous, automated method to validate security control effectiveness against real-world attacker techniques mapped to the MITRE ATT&CK framework. Use this when moving beyond traditional point-in-time penetration testing to establish continuous control validation and automated adversary emulation across the entire IT environment.

This skill guides the implementation of full disk encryption using Microsoft BitLocker on Windows endpoints. It covers best practices for deploying encryption via GPO, Intune, and command line, ensuring data-at-rest protection. Use this when meeting compliance requirements (PCI, HIPAA) or securing mobile workstations against physical loss or theft.

This guide details the implementation of the three core email authentication protocols: SPF, DKIM, and DMARC. By configuring these DNS records, users can prevent domain spoofing, ensure message integrity, and define strict policies (quarantine/reject) for unauthenticated emails, drastically reducing exposure to phishing and spoofing attacks.

This skill guides the implementation of email sandboxing using Proofpoint Targeted Attack Protection (TAP). It covers configuring isolated detonations for suspicious attachments and URLs to detect zero-day malware, evasive phishing, and advanced threats. Learn to tune policies, monitor the TAP dashboard, and integrate findings with SIEM for robust email security architecture.