Skill UI

A comprehensive skill for auditing service accounts across complex enterprise environments, including Active Directory, major cloud platforms (AWS, Azure, GCP), and databases. It identifies risks such as orphaned accounts, over-privileged access, and non-compliant credentials, ensuring adherence to industry standards like SOX, PCI DSS, and HIPAA. Used during security assessments and compliance reviews.

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

This tool automates the testing of web application URL parameters for Server-Side Request Forgery (SSRF). It probes sensitive endpoints, including cloud metadata services (AWS, GCP, Azure), internal network resources, and various URI schemes (file://, gopher://). It is designed for authorized penetration testing environments to confirm SSRF vulnerabilities and generate detailed threat reports.

This skill guides the deployment and configuration of Microsoft Defender for Cloud (CNAPP) across Azure, multi-cloud, and hybrid environments. It covers enabling specialized security plans for various workloads (servers, containers, databases), managing the Secure Score, and implementing advanced security controls like Just-In-Time (JIT) access, ensuring comprehensive cloud workload protection and compliance.

This skill provides comprehensive management capabilities for AI Integrations within the Arize platform. Users can create, list, retrieve, and update credentials for various Large Language Model (LLM) providers, including OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, and Vertex AI. These integrations are crucial for enabling Arize's advanced monitoring and evaluation features that require invoking external LLMs.

This advanced workflow automates the process of analyzing the operational health of specific Azure resources. It ingests and analyzes raw logs, telemetry data, and performance metrics from diverse Azure services (e.g., VMs, Web Apps, Databases). The system performs comprehensive root cause analysis, classifies issues (Critical, High, Medium), and generates actionable, step-by-step remediation plans, significantly reducing manual troubleshooting time.

This agent guides users in selecting the optimal Azure role assignment that strictly adheres to the principle of least privilege. Given a set of desired permissions, it utilizes specialized tools to either identify a suitable built-in role or generate a custom role definition. Finally, it provides actionable code snippets, including CLI commands and Bicep templates, ensuring proper and secure role assignment.

Automates importing live Azure environments into Terraform by discovering subscriptions, groups, or resource IDs, mapping dependencies, and generating AVM-based IaC files ready for validation and planning.

Analyzes Terraform plan JSON from the AzureRM provider to filter false-positive Set-type attribute diffs when reviewing changes to gateways, load balancers, NSGs, and similar resources.

This guide details configuring enterprise-grade Role-Based Access Control (RBAC) for Adobe services. It covers integrating Adobe Admin Console with external Identity Providers (Azure AD, Google Workspace) using SCIM provisioning, automating user provisioning via the User Management API (UMAPI), and defining custom product profiles to enforce fine-grained, centralized permissions across the organization.

This guide provides a deep dive into migrating machine learning workloads, including inference services and training pipelines, from major hyperscalers (AWS, GCP, Azure) to the CoreWeave GPU cloud. It covers cost comparisons, containerization, Kubernetes YAML adaptation, and a phased deployment strategy, helping users ensure a smooth, cost-effective, and optimized transition.

This skill provides a comprehensive guide for deploying Navan's connections to major enterprise platforms, including ERP systems (NetSuite, Xero), HRIS (Workday), and Identity Providers (Okta, Azure AD). It covers best practices for expense sync, user provisioning (SCIM), and Single Sign-On (SAML/OIDC) using APIs and admin configurations, ensuring secure and accurate data flow across disparate business systems.