Skill UI

Expert in handling file uploads and cloud storage solutions like S3 and Cloudflare R2. Covers presigned URLs, multipart uploads, and image optimization. Ensures security by validating file types and preventing path traversal attacks. Optimizes performance for large files without blocking.

Master Firebase backend services including Authentication, Firestore, Realtime Database, Cloud Functions, Storage, and Hosting. Learn security rules, data modeling for read-heavy workloads, and cost optimization to avoid pitfalls like expensive reads and query limitations.

This skill covers configuring host-based and cloud firewalls using iptables, nftables, and UFW. It includes implementing network segmentation, traffic filtering, and security zone policies. Suitable for securing server perimeters, migrating firewall technologies, and responding to security incidents. Requires Linux root access and network knowledge.

Configure GCP Cloud Audit Logs for compliance and security investigation. Set up log sinks to BigQuery, Cloud Storage, and Pub/Sub for export and real-time streaming. Query audit logs to monitor admin activity, data access, and policy changes.

Provision and manage fully managed relational databases on Google Cloud Platform, including PostgreSQL, MySQL, and SQL Server. Configure high availability, automated backups, security settings, and private IP connections. Suitable for production workloads requiring ACID transactions and regional failover. Includes Terraform configuration examples for infrastructure as code deployment.

Learn to design and secure network infrastructure on Google Cloud Platform. This skill covers creating VPCs, configuring firewall rules, setting up Cloud NAT, and deploying load balancers. It also includes implementing Cloud Armor for security and Private Service Connect for private access. Essential for DevOps engineers managing GCP environments.

Store and manage secrets securely in Google Cloud Platform. Configure IAM policies, integrate with GKE, manage secret versions, set expiration, and enable Workload Identity. Suitable for DevOps and security teams managing sensitive data in cloud environments.

A security skill for identifying cloud and infrastructure misconfigurations such as exposed storage buckets, metadata endpoints, and admin panels. Includes techniques for S3, EC2, Jenkins, and CloudWatch RUM exploitation, requiring explicit authorization for offensive testing.

This skill acts as a loader for the /hunt orchestrator, facilitating authorized security assessments. It enforces strict scope boundaries and requires explicit written authorization before execution. The tool includes baseline checks to avoid false positives and fingerprinting capabilities to identify technology stacks like Next.js or cloud providers. It focuses on generating reproducible findings for remediation rather than exploitation.

A security skill for hunting server-side request forgery (SSRF) vulnerabilities, covering cloud metadata, internal services, OOB confirmation, and authorized testing workflows.

This skill provides comprehensive guidance on establishing secure, high-performance connectivity between on-premises data centers and major public cloud providers (AWS, Azure, GCP). It covers various connection options, including Site-to-Site VPN, AWS Direct Connect, Azure ExpressRoute, and GCP Cloud Interconnect. Use this skill to design and implement complex hybrid network patterns (e.g., Hub-and-Spoke, Multi-Cloud), ensuring high availability, proper routing (BGP), and adherence to security best practices.

Expert Kubernetes architect specializing in cloud-native infrastructure, GitOps workflows, multi-cluster strategy, security, service mesh, and enterprise container orchestration at scale.