Skill UI

A comprehensive methodology for conducting authorized bug bounty assessments. Covers the full pipeline from reconnaissance to validation and reporting, emphasizing impact-based hunting and avoiding theoretical vulnerabilities. Includes cluster hunting techniques for maximizing findings.

Authorized cloud, container, and Kubernetes security assessment workflow covering metadata SSRF, IAM misconfiguration, container escape paths, and cluster RBAC review, with tooling like kubectl, Trivy, and kube-bench.

Deploy and manage Google Kubernetes Engine clusters with standard and autopilot modes, node pools, workload identity, and ingress. For teams running containerized workloads on GCP.

Learn to operate GPU-backed Kubernetes clusters for AI inference and training workloads. Covers NVIDIA GPU Operator installation, device plugin configuration, MIG partitioning for resource sharing, and time-slicing for non-MIG GPUs. Includes GPU-aware autoscaling, health monitoring with DCGM and Prometheus, and troubleshooting scheduling or driver issues. Essential for production AI infrastructure management.

Helm is a package manager for Kubernetes that simplifies application deployment. This skill covers creating, managing, and deploying Helm charts. It includes defining chart structures, configuring values, writing templates, and using Helm commands for installation and upgrades. Ideal for DevOps engineers managing containerized applications on Kubernetes clusters.

A security reconnaissance tool for identifying Kubernetes and Docker misconfigurations, including anonymous cluster-admin access, kubelet RCE, etcd exposure, and docker.sock vulnerabilities. Requires explicit authorization before use. Helps penetration testers find high-impact findings like API anonymous cluster-admin, kubelet 10250 exec/run, and container escape via runc.

This skill provides a comprehensive guide for implementing security policies in Kubernetes clusters, including NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards. It covers network segmentation, least-privilege access, compliance policies, and admission control to ensure defense-in-depth security for multi-tenant environments.

Expert Kubernetes architect specializing in cloud-native infrastructure, GitOps workflows, multi-cluster strategy, security, service mesh, and enterprise container orchestration at scale.

This specialized, end-to-end workflow guides the deployment of applications onto Kubernetes clusters. It systematically covers all critical production phases, including Docker container preparation, generating K8s manifests, structuring applications with Helm charts, configuring advanced service meshes (like Istio), enforcing robust security policies (RBAC, NetworkPolicy), and implementing full observability and GitOps pipelines for reliable, scalable deployments.

Implement security best practices for Kubernetes clusters, including Pod Security Standards, security contexts, network policies, and RBAC configurations. Essential for securing containerized workloads and meeting compliance requirements in production environments.

KubeStellar Console is an open-source, multi-cluster Kubernetes dashboard (CNCF project) that provides advanced operational capabilities powered by an MCP server and built-in AI agent skills. It helps manage complex deployments across edge and cloud environments, offering AI-assisted troubleshooting, performance testing, and deep integration with major CNCF projects like Argo and Istio.

Kustomize enables declarative customization of Kubernetes manifests without complex templating. It supports managing configurations across environments, applying patches, and generating variants from base resources. Ideal for DevOps teams managing production and development clusters efficiently.