Skill UI

This comprehensive guide details how to establish AWS Security Hub as a centralized Cloud Security Posture Management (CSPM) platform. It aggregates security findings from multiple AWS services (GuardDuty, Inspector, Macie) and third-party tools. Users can enforce compliance against industry standards (CIS, PCI-DSS, NIST), automate remediation workflows via EventBridge, and generate comprehensive evidence for compliance audits.

A comprehensive guide to continuously monitoring multi-cloud environments (AWS, Azure, GCP) for security misconfigurations, compliance violations, and risk drift. This solution leverages industry tools like Prowler and ScoutSuite to enforce compliance standards (CIS, SOC 2, PCI DSS) across heterogeneous cloud infrastructures, providing deep visibility into security gaps and automating remediation workflows.

A comprehensive guide to configuring multi-layered DDoS protection using Cloudflare. This skill covers mitigating volumetric (L3/4) and application-layer (L7) attacks by setting up managed rulesets, Web Application Firewall (WAF) rules, rate limiting, and Bot Management. Ideal for strengthening security architecture and meeting compliance standards.

A comprehensive guide to securing Software as a Service (SaaS) applications (e.g., Microsoft 365, Salesforce) using Zero Trust principles. This skill covers deploying CASB/SSPM solutions, enforcing conditional access policies (MFA, device compliance), governing OAuth permissions, and applying session-level DLP controls to prevent data exfiltration in multi-cloud environments. Ideal for security architects and engineers.

Cartography syncs multi-cloud assets (AWS, GCP, Azure) into a Neo4j graph database. It maps relationships like IAM chains, network paths, and cross-account trusts, allowing security teams to conduct comprehensive asset inventories, identify complex attack paths, and generate detailed security reports across heterogeneous cloud environments.

Perform comprehensive security assessments for Google Cloud Platform environments. This tool audits critical security components—including IAM policies, firewall rules, and storage permissions—against industry benchmarks like the CIS GCP Foundations Benchmark. It helps organizations establish secure baselines and ensure continuous compliance across multiple GCP projects.

This skill guides the deployment and configuration of Microsoft Defender for Cloud (CNAPP) across Azure, multi-cloud, and hybrid environments. It covers enabling specialized security plans for various workloads (servers, containers, databases), managing the Secure Score, and implementing advanced security controls like Just-In-Time (JIT) access, ensuring comprehensive cloud workload protection and compliance.

KubeSphere Core acts as the central operating system for cloud-native application management built on Kubernetes. It provides essential functions, including API aggregation, multi-cluster routing, and multi-tenant separation. It manages core resources and simplifies complex cloud-native deployment and operation tasks.

A comprehensive guide to optimizing CAST AI's core performance metrics, including node provisioning speed, autoscaler responsiveness, and API call efficiency. This skill covers techniques like configuring headroom, selecting optimal instance families, tuning evictors, and implementing caching for multi-cluster dashboards to ensure high availability and cost efficiency in cloud environments.

This skill provides comprehensive guidance for deploying and managing GPU-accelerated AI inference services on CoreWeave Kubernetes (CKS). It covers best practices including containerization using NVIDIA CUDA base images, configuring specific GPU resource limits (A100/H100), setting up robust health checks, and executing controlled rolling updates. Ideal for managing multi-model inference and scaling demanding AI workloads in a cloud environment.

This guide provides comprehensive best practices for configuring Palantir Foundry integrations across development, staging, and production environments. It details how to manage environment-specific credentials, hostnames, and scope policies using structured Python code and platform-specific deployment manifests (Docker Compose, Kubernetes, gcloud). Use this skill when implementing resilient, multi-tier SaaS deployments that require strict credential and configuration separation.

KubeStellar Console is an open-source, multi-cluster Kubernetes dashboard (CNCF project) that provides advanced operational capabilities powered by an MCP server and built-in AI agent skills. It helps manage complex deployments across edge and cloud environments, offering AI-assisted troubleshooting, performance testing, and deep integration with major CNCF projects like Argo and Istio.