Skill UI

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This skill focuses on detecting and mitigating sophisticated code injection and privilege escalation attacks across the entire serverless ecosystem (AWS Lambda, Azure, GCP). It combines static analysis of dangerous code sinks (e.g., eval, exec) with continuous monitoring of event sources (S3, SQS, API Gateway) and rigorous IAM auditing. It provides a comprehensive framework to secure the expanding serverless attack surface.

This skill automates the entire SOC 2 Type II audit lifecycle. It facilitates gap assessment against AICPA Trust Services Criteria (CC1-CC9) and collects continuous evidence from major cloud providers (AWS, Azure, GCP) and identity systems (Okta, Jira). It supports validating control effectiveness, remediation tracking, and overall compliance monitoring for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Checks Microsoft SDK code by verifying API signatures, fetching docs, and finding Azure samples before writing or reviewing code that touches .NET or Microsoft APIs.

Query authoritative Microsoft documentation to explain Azure, .NET, M365, Windows, and Power Platform concepts, tutorials, limits, configurations, or best practices whenever a user wants to understand how something works.

Guides agents through researching Microsoft technologies via Learn MCP docs, then scaffolds hybrid skills that store essential knowledge locally while enabling dynamic lookups for depth.

Enables structured cloud penetration testing across Azure, AWS, and GCP by guiding reconnaissance, authentication, enumeration, exploitation, and persistence workflows for authorized assessments.

This skill provides comprehensive management capabilities for AI Integrations within the Arize platform. Users can create, list, retrieve, and update credentials for various Large Language Model (LLM) providers, including OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, and Vertex AI. These integrations are crucial for enabling Arize's advanced monitoring and evaluation features that require invoking external LLMs.

Provides comprehensive command-line management for all Azure DevOps resources. Users can manage projects, repositories, CI/CD pipelines, pull requests, work items, and artifacts using the Azure CLI with the dedicated extension. This tool is essential for automation scripting, integration testing, and streamlining complete DevOps workflows.

Guide to instrument Azure-hosted ASP.NET Core or Node.js web apps with telemetry reporting to Azure App Insights for improved observability and health tracking.

Analyzes IaC files and live Azure resources to validate SKUs, usage, and costs, then generates GitHub issues (one per recommendation plus an EPIC) so teams can track implementation of prioritized savings.