Skill UI

A comprehensive skill for analyzing AWS spending patterns and identifying areas of waste. It provides actionable strategies to reduce cloud costs by detecting idle resources (like unattached EBS volumes or unused Elastic IPs), recommending Reserved Instances, and generating reports using AWS CLI and Cost Explorer data.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

A comprehensive guide for configuring API access across distinct environments (Development, Staging, Production) for SaaS services. It details architectural patterns for separating workspaces, managing environment-specific secrets (e.g., using AWS Secrets Manager), and implementing environment guards to ensure code behaves correctly and securely in different stages of deployment. Ideal for CI/CD pipeline setup and robust client-side configuration.

A robust pattern for configuring API clients to interact with Linear across multiple isolated environments (Development, Staging, Production). This setup ensures that environment-specific credentials (API keys, webhooks) are securely loaded from secret managers (Vault, AWS, GCP) and implements environment guards to prevent accidental operations in the wrong environment. Ideal for professional CI/CD pipelines.

Assess web apps for client-side injection flaws, covering stored, reflected, and DOM XSS plus HTML injection, demonstrate session hijacking payloads, and guide validation and sanitization checks.

A specialized tool/methodology to detect Broken Object Property Level Authorization (BOPLA), covering two critical OWASP API security flaws: Excessive Data Exposure and Mass Assignment. Use this when auditing APIs to ensure that data returned in responses is limited to only what the client needs, and that updates/writes are strictly filtered to prevent attackers from modifying unauthorized object properties.

`jq` is the standard and powerful CLI tool for querying, filtering, and reshaping JSON data. This skill provides expert-level practical patterns for working with deeply nested structures, handling complex transformations (like flattening, renaming, and grouping), and integrating JSON logic into shell pipelines. Essential for parsing API outputs (AWS, GitHub), log files, and building robust Bash scripts.

This comprehensive guide provides step-by-step instructions for setting up a development environment to use AWS CDK (Cloud Development Kit) with Python. It covers installing prerequisites (Node.js, AWS CLI), initializing a CDK project, managing Python dependencies, and mastering the full deployment workflow, enabling users to define and deploy scalable AWS infrastructure as code.

A comprehensive guide and code pattern for configuring ClickHouse instances across development, staging, and production environments. It emphasizes best practices for infrastructure-as-code (IaC), secure secrets management (integrating AWS Secrets Manager, Vault, etc.), and ensuring environment-specific settings are correctly applied for reliable data analytics pipelines.

This guide provides a comprehensive strategy for configuring ClickUp API access across development, staging, and production environments. It emphasizes the critical importance of environment isolation using separate API tokens and dedicated workspaces to prevent data leaks and accidental destructive operations in live environments. Includes best practices for secret management (Vault, AWS, GCP) and implementing environment guards.