Skill UI

The official Hugging Face Hub CLI (`hf`) is a comprehensive command-line tool for managing all types of resources on the Hugging Face Hub. Use it to download, upload, synchronize, and manage models, datasets, Spaces, and cloud buckets. It facilitates secure authentication, local cache management, and complex data operations, making it essential for ML workflows.

This comprehensive guide details advanced strategies for building highly resilient applications that interact with external LLM APIs. It covers built-in exponential backoff retries, controlling request throughput via concurrency limits, implementing provider fallbacks, and custom rate limiting using token buckets. Essential knowledge for achieving stable, high-volume API usage in production systems.

This guide provides advanced techniques for managing API rate limits (429 errors) and complexity budgets when interacting with the Linear API. It covers reading rate limit headers, implementing exponential backoff with jitter for robust retries, controlling request bursts via token buckets, and optimizing GraphQL queries to minimize complexity scores. Use this when developing reliable integrations that must adhere to strict API quotas.

This skill provides a comprehensive framework for implementing robust API rate limiting. It supports advanced algorithms like sliding windows, token buckets, and fixed counters, backed by Redis for distributed state. Use it to protect endpoints from excessive requests, enforce tiered quotas (Free, Pro, Enterprise), and prevent abuse like brute-force attacks by setting per-user, per-endpoint, or per-API-key limits.

This tool collects a comprehensive, redacted diagnostic bundle from a Supabase project. It systematically tests connectivity, authentication (Auth), Realtime capabilities, Storage buckets, and Row-Level Security (RLS) policies. The resulting archive is designed for sharing with support teams to accelerate troubleshooting of complex issues like connection failures or misconfigurations.

A comprehensive guide and set of scripts to systematically audit AWS S3 buckets for security misconfigurations. This tool identifies publicly exposed data, overly permissive ACLs, inadequate bucket policies, and missing encryption settings, ensuring adherence to least-privilege principles and compliance frameworks like SOC 2 or HIPAA.

A comprehensive guide and workflow for detecting unauthorized data exfiltration from AWS S3 buckets. It details how to leverage multiple AWS services—including CloudTrail, GuardDuty, Amazon Macie, and Athena—to analyze access patterns, identify bulk downloads, and detect cross-account data transfers, ensuring robust cloud compliance and security monitoring.

This skill implements Cloud Security Posture Management (CSPM) across multi-cloud environments. It detects critical cloud-native misconfigurations, such as over-permissive IAM roles, exposed storage buckets, and unencrypted data, using industry-leading tools like AWS Security Hub, Azure Defender for Cloud, Prowler, and ScoutSuite. Use this when conducting comprehensive audits of complex, multi-cloud infrastructures for compliance or building consolidated security posture reports.

Automate security scanning for Infrastructure as Code (IaC) using best-in-class tools like Checkov and tfsec. This method analyzes Terraform, CloudFormation, and Kubernetes manifests to detect misconfigurations, enforce policy-based governance, and prevent common security vulnerabilities (e.g., public S3 buckets) before deployment. Essential for establishing secure CI/CD pipelines and meeting compliance standards.

ScoutSuite is an open-source, agentless tool designed for comprehensive AWS security posture assessment. It queries AWS APIs to automatically enumerate resources across various services, identify critical misconfigurations (like public S3 buckets or overly permissive IAM roles), and generate an interactive HTML report. It is ideal for conducting cloud security audits, compliance checks, or incident response procedures using read-only credentials.

This skill provides a comprehensive framework for performing authorized penetration testing on Google Cloud Platform (GCP). It uses specialized tools like GCPBucketBrute to enumerate publicly accessible storage buckets and audits IAM policies to identify overly permissive role bindings. The process includes checking service account keys and mapping potential privilege escalation paths, generating actionable, risk-scored reports for robust cloud security posture management.

Generates a precise, evidence-based installation plan for a project's component catalog (ECC). Instead of loading a full, noisy bundle, this skill analyzes the repository's actual code structure, dependencies, and CI/CD evidence to classify skills, rules, and commands into 'DAILY' (essential) and 'LIBRARY' (referenceable) buckets. It ensures only necessary components are active, optimizing the development environment.