Skill UI

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

Configure GDPR-compliant data handling, PII scrubbing, and data retention policies within Sentry. This skill provides detailed instructions on implementing client-side `beforeSend` hooks and server-side scrubbing rules to securely redact sensitive data (passwords, emails, IP addresses, CC numbers). Essential for achieving compliance with regulations like GDPR, HIPAA, and meeting SOC 2 audit controls.

This framework enforces organizational governance and policy guardrails for Sentry usage. It standardizes configuration across services, mandatorily scrubbing PII, enforcing naming conventions, and managing trace rate caps based on service criticality. It integrates into CI/CD to prevent compliance drift and ensure adherence to standards like GDPR and HIPAA.

This comprehensive guide details how to control and audit the scope of code and data accessible by AI tools (like Codeium or Windsurf AI). Learn to implement robust data exclusion patterns, set compliance boundaries (e.g., HIPAA, GDPR), and configure secure deployment modes, ensuring sensitive data and secrets are never processed or retained by the AI model.

This skill acts as a specialized domain intelligence strategist, capable of analyzing specific industry niches (e.g., Fintech, HealthTech). It goes beyond general functionality to inject crucial domain-specific knowledge, mandatory regulatory compliance (like HIPAA or GDPR), and industry-leading UX/UI patterns. Essential for ensuring the product is optimized for its vertical market.

Compose comprehensive clinical reports—case studies, diagnostics, trials, and patient notes—while ensuring CARE/ICH-GCP compliance, HIPAA-safe documentation, and mandatory AI-generated scientific schematics for each deliverable.

Generates concise 3-4 page LaTeX/PDF treatment plans across medical specialties, embedding SMART goals, evidence-based interventions, HIPAA-compliant formatting, and mandated AI-generated schematics for quick clinical actionability.

Guides growth-stage companies through CISO-level security programs by quantifying risks in dollars, sequencing compliance (SOC 2/ISO 27001/HIPAA/GDPR), architecting zero-trust defenses, leading incident response, and translating budgets for boards or sales conversations.

A comprehensive guide and set of scripts to systematically audit AWS S3 buckets for security misconfigurations. This tool identifies publicly exposed data, overly permissive ACLs, inadequate bucket policies, and missing encryption settings, ensuring adherence to least-privilege principles and compliance frameworks like SOC 2 or HIPAA.

This skill automates the hardening of Linux endpoints (Ubuntu, RHEL, CentOS) by implementing industry-standard security best practices guided by CIS Benchmarks. It systematically secures various layers, including filesystem permissions, network parameters (sysctl), SSH configuration, user access controls (PAM), and integrates deep auditing using auditd and OpenSCAP. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

This skill guides the security hardening of Windows endpoints (10/11, Server 2019/2022) using established CIS Benchmarks. It provides a comprehensive workflow for establishing secure organizational baselines, configuring Group Policy Objects (GPOs), and enforcing security controls across critical areas like password policies, audit logs, and firewall rules. It is essential for achieving compliance with standards like PCI DSS, HIPAA, and SOC 2.

A comprehensive technical guide covering the implementation of Data Loss Prevention (DLP) across major cloud platforms, including AWS Macie, Google Cloud DLP, and Azure Information Protection. Learn how to automatically discover, classify, and protect sensitive data (PII, PHI) residing in cloud storage, databases, and data pipelines, ensuring adherence to compliance frameworks like GDPR and HIPAA.