Skill UI

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

A comprehensive guide for implementing and managing Role-Based Access Control (RBAC) within the Guidewire InsuranceSuite (PolicyCenter, ClaimCenter, BillingCenter). It details role hierarchies (Admin, Underwriter, Claims Adjuster), permission checking logic using APIs, and best practices for ensuring regulatory compliance (NAIC, DOI). Includes code examples for user provisioning and audit logging.

A comprehensive framework for assessing the security, privacy, and compliance posture of Kling AI integrations. It covers crucial areas such as data residency, credential management, content policy adherence, and GDPR compliance (e.g., right to erasure). Use this guide when preparing for security audits or implementing robust data handling protocols for AI-generated content.

This skill provides comprehensive guardrails for securing Replit-hosted applications. It covers critical security policies including preventing hardcoded secrets, implementing resource usage limits (CPU/Memory), enforcing endpoint authentication, and ensuring proper deployment configuration. Use this when you need to harden a Replit app for production or audit its security posture.

This expert simulates a compliance expert, specializing in regulatory requirements for software systems, including GDPR, HIPAA, SOC2, and PCI-DSS. It performs comprehensive audits, identifies compliance gaps, and generates actionable implementation plans, technical controls, and policy templates to ensure adherence to industry standards.

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

A comprehensive guardrail system for enforcing organizational governance across Supabase projects. It provides reusable RLS policy templates, strict naming conventions, CI-checked migration processes, cost alert configurations, and security audit scripts. Use this to ensure development consistency, security, and cost control at scale.

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

This skill guides the advanced configuration of Windows Event Logging using Group Policy Objects (GPO) and advanced audit policies. It enables high-fidelity logging for critical security events, including process creation (Event 4688), logon/logoff activities, and object access. The process covers optimizing log sizes and implementing Windows Event Forwarding (WEF) to centralize data into SIEM platforms for effective threat detection and forensic investigation.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill guides the implementation and auditing of advanced network segmentation within Kubernetes using Calico. It enables establishing zero-trust microsegmentation by creating and managing NetworkPolicy and GlobalNetworkPolicy resources. Use this to strictly control pod-to-pod traffic, enforce namespace isolation, restrict egress rules, and apply DNS-based security policies, significantly hardening your cluster's security posture.