Skill UI

Audits IAM policies, ACLs, and similar access control setups via the access-control-auditor plugin to surface misconfigurations, overly permissive roles, and privilege escalation risks across cloud and infrastructure environments.

Audits IAM policies, ACLs, and similar access control setups via the access-control-auditor plugin to surface misconfigurations, overly permissive roles, and privilege escalation risks across cloud and infrastructure environments.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

This skill provides advanced techniques for optimizing PostHog Cloud usage and reducing associated costs. It covers auditing event volume, implementing intelligent event sampling (e.g., sampling pageviews or autocapture events), filtering bot traffic, and tuning session recording rates. The goal is to maintain critical analytical value while staying within budget limits.

This comprehensive guide provides a detailed framework for optimizing spending across Replit services. Learn how to conduct a thorough billing audit, right-size deployment resources (Autoscale vs. Reserved VM), manage data egress costs, optimize team seat licenses, and clean up idle resources. Essential for controlling cloud spending and ensuring efficient resource allocation in any development workflow.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

This guide provides comprehensive, actionable methods to audit and significantly reduce Supabase operational costs. It covers advanced database tuning (vacuuming, index cleanup, bloat management), efficient storage lifecycle management, connection pooling strategies, and optimal plan selection. Use this when analyzing high billing reports, identifying resource waste, or implementing robust cost-saving measures in a cloud environment.

A comprehensive, multi-phase workflow designed for Infrastructure as Code (IaC) using Terraform. It guides users through provisioning cloud resources, creating reusable modules, managing complex state, handling multi-environment deployments, and integrating robust CI/CD pipelines and security practices. Ideal for establishing scalable, repeatable, and auditable cloud infrastructure.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) and financial governance for cloud GPU environments. It allows organizations to allocate resources, set team-specific budgets, whitelist approved GPUs, and track spending via detailed audit logs. Ideal for multi-team research and engineering environments requiring strict cost accountability and access separation.