Skill UI

This workflow systematically analyzes deployed AWS resources and Infrastructure-as-Code (IaC) definitions. It collects usage metrics from CloudWatch and Cost Explorer to identify over-provisioning, unused resources, and inefficient configurations (e.g., right-sizing EC2, S3 lifecycle policies). It generates actionable cost optimization recommendations and creates structured GitHub issues for tracking and implementing savings.

This skill allows users to query the current state of various AWS resources (including EC2, S3, Lambda, RDS, VPC, etc.) using natural language. It translates user intent into strictly read-only AWS CLI commands (e.g., `describe-*`, `list-*`). Crucially, this tool can only view data and is contractually incapable of performing any write, modify, delete, or mutation actions, ensuring maximum safety.

Enumerate cloud storage buckets, confirm dangling-CNAME takeover risks, recover AWS account IDs offline from leaked access keys, validate npm/PyPI dependency-confusion vectors, and fingerprint cloud-native/Kubernetes/CI exposure for authorized recon.

Configure AWS CloudTrail for comprehensive audit logging across your organization. This skill covers setting up organization-wide trails, managing S3 bucket policies for log storage, enabling encryption and versioning, and configuring event selectors for security compliance. Use this for SOC 2, HIPAA, or PCI DSS requirements, security incident investigation, and forensic analysis of AWS API activity.

This skill provides comprehensive techniques for penetrating AWS cloud environments. It covers IAM enumeration, privilege escalation, SSRF attacks on metadata endpoints, S3 exploitation, and Lambda code extraction. Designed for authorized security assessments and red team operations to identify vulnerabilities and persistence mechanisms.

This skill covers configuring Amazon S3 buckets with production-grade security, lifecycle policies, and access controls. It includes creating buckets, enabling encryption and versioning, setting up bucket policies for cross-account access, and managing storage class transitions. Use this skill for managing object storage on AWS, implementing disaster recovery through replication, and optimizing costs with lifecycle rules.

This skill enables users to discover and access NEXRAD radar data for specific sites, times, and products. It supports retrieving Level II archive volumes, real-time chunks, and Level III sources with metadata validation. It helps select reflectivity, velocity, and other radar moments from AWS S3 buckets while ensuring data integrity.

This skill covers configuring and managing object storage solutions like AWS S3, MinIO, and GCS. It includes CLI operations for bucket management, uploading/downloading files, setting up versioning, implementing bucket policies for access control, and configuring lifecycle rules for cost optimization. Suitable for DevOps engineers managing application assets, backups, logs, and media files in cloud or on-premises environments.

Retrieve numerical weather prediction data from public AWS S3 and HTTP archives using GRIB2 inventories and byte ranges. Supports Herbie, provider fallbacks, and verified caching. Ideal for fetching GFS, HRRR, or RAP model outputs where specific variables or levels are needed. Does not interpret forecasts.