Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Automates cloud security posture assistance within the Security Advanced domain, guiding practitioners through best practices, compliance checks, threat modeling, and prod-ready configurations whenever they mention cloud security posture.

Automates Cloudlayer operations through Composio’s Rube MCP toolkit with search-driven tool discovery, ensuring active connections, schema compliance, and session reuse before executing multi-tool workflows.

This skill provides expert guidance for modern, multi-cloud database administration. It covers comprehensive knowledge across AWS, Azure, and GCP platforms, spanning relational, NoSQL, and graph databases. Key areas include Infrastructure as Code (Terraform, Flyway), achieving high availability, disaster recovery, advanced performance optimization, and ensuring strict regulatory compliance (HIPAA, GDPR). It is essential for managing complex, highly reliable cloud data architectures.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

This skill provides advanced expertise in Infrastructure as Code (IaC) using Terraform and OpenTofu. It covers designing robust, reusable modules, managing complex multi-cloud state backends, and implementing enterprise-grade CI/CD pipelines. It specializes in governance, Policy-as-Code, and achieving GitOps compliance for full infrastructure automation.

This skill outlines security best practices for the TwinMind AI meeting assistant. It covers crucial aspects like on-device audio processing, encrypted cloud backups, and managing microphone permissions. Use it when setting up new TwinMind instances or managing AI operations to ensure data privacy, compliance, and robust security for sensitive meeting data.

A comprehensive guide to managing training data and model artifacts securely on cloud GPU instances (e.g., Vast.ai). It covers best practices for data transfer (SCP, compressed, cloud staging), implementing AES-256 encryption, managing checkpoints to S3, and performing secure cleanup before instance destruction, ensuring compliance and data integrity.

Perform comprehensive security audits across AWS, Azure, and GCP by assessing infrastructure configurations against established CIS Foundations Benchmarks. This skill guides users through running automated scans using industry tools like Prowler and ScoutSuite, interpreting failed controls, identifying security gaps, and implementing systematic remediation to ensure continuous compliance and maintain a robust security posture.

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.