Skill UI

This skill provides advanced expertise in Infrastructure as Code (IaC) using Terraform and OpenTofu. It covers designing robust, reusable modules, managing complex multi-cloud state backends, and implementing enterprise-grade CI/CD pipelines. It specializes in governance, Policy-as-Code, and achieving GitOps compliance for full infrastructure automation.

Guides judicial and extrajudicial auction property appraisals with ABNT NBR 14653 principles, market vs forced liquidation values, comparative/rent/cost methods, CUB rates, and risk margins for Brazil.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

Deploy Aqua Security's Trivy scanner within CI/CD pipelines, registries, and Kubernetes clusters to scan container images, repos, IaC, and workloads for vulnerabilities, misconfigurations, secrets, and SBOM/license issues.

Automates scanning Terraform, CloudFormation, Kubernetes, and Helm IaC with Checkov/tfsec/KICS, enforces policy-as-code, and integrates into CI/CD to stop misconfigurations before deployment.

Uses Aqua Security Trivy to scan container images, filesystems, IaC, and Kubernetes manifests for vulnerabilities, secrets, and license issues while generating SBOMs and integrating into CI/CD pipelines for triage-ready reports.

Integrates Aqua Security’s Trivy scanner into CI/CD workflows to automatically scan Docker images, IaC files, and configs for OS and dependency CVEs, enforce severity-based quality gates, and block vulnerable images before deployment.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Analyzes IaC files and live Azure resources to validate SKUs, usage, and costs, then generates GitHub issues (one per recommendation plus an EPIC) so teams can track implementation of prioritized savings.

Automates importing live Azure environments into Terraform by discovering subscriptions, groups, or resource IDs, mapping dependencies, and generating AVM-based IaC files ready for validation and planning.