Skill UI

Provides canonical AWS serverless patterns covering Lambda handlers, DynamoDB single-table modeling, CDK infrastructure, and S3 event processing along with anti-patterns and a checklist for production-ready deployments.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

This skill provides comprehensive scripts and workflows to automatically identify and remove unused AWS resources across multiple services (EBS, S3, EC2, EIPs). By automating the cleanup of orphaned volumes, old snapshots, and stale data, users can eliminate cloud waste, significantly optimizing their AWS expenditure and ensuring a cost-efficient infrastructure.

Implements best practices for secure audio transcription using Deepgram. This guide covers PII redaction (built-in and custom patterns), secure audio upload to S3 with encryption, managing data retention policies, and ensuring compliance with major regulations like GDPR and HIPAA. It provides a comprehensive pipeline for handling sensitive audio data in enterprise applications.

Provides expert guidance on secure and performant file upload mechanisms for cloud environments. Covers best practices for using services like AWS S3 and Cloudflare R2, including implementing presigned URLs, handling large files via streaming, and optimizing images. Crucially emphasizes critical security measures such as validating file types using magic bytes, enforcing size limits, and preventing path traversal attacks.

This skill guide provides advanced techniques for optimizing Ideogram API usage. It covers selecting optimal model tiers (e.g., Turbo vs. Standard) based on desired quality and speed, implementing prompt-based caching to reduce API calls and costs, and managing parallel generation with concurrency limits for high throughput. Additionally, it demonstrates CDN integration for rapid asset delivery.

This skill addresses the challenge of handling temporary CDN links for videos generated by Kling AI. It provides a comprehensive, multi-cloud solution to download the video asset and persistently upload it to major cloud storage platforms, including AWS S3, Google Cloud Storage (GCS), and Azure Blob Storage. It facilitates building robust, long-term media pipelines and ensures metadata preservation.

Automates S3 bucket policy generation within AWS, offering step-by-step guidance, safeguards best practices, and produces production-ready configurations for compute, storage, networking, and serverless scenarios.

Automates guidance on setting up and verifying AWS S3 lifecycle configurations, delivering best-practice steps, reusable templates, and validation for storage automation tasks.

This skill provides expert guidance on creating, reviewing, and managing production-grade AWS infrastructure using Terraform. It focuses on best practices for reusable module design, robust remote state management (S3 + DynamoDB), and adhering to modern HashiCorp Configuration Language (HCL) patterns like using 'for_each'. Ideal for teams building or auditing complex, scalable AWS environments.

This tool detects abnormal access patterns across major cloud storage services (AWS S3, GCS, Azure Blob Storage). By analyzing audit logs like CloudTrail, it uses statistical baselines and time-series anomaly detection to identify suspicious activities such as after-hours bulk downloads, access from new IPs, or unusual API call spikes. It is crucial for investigating potential data exfiltration incidents or building robust cloud security detection rules.