Skill UI

This skill performs comprehensive security audits, threat modeling using STRIDE/PASTA, and infrastructure hardening. It supports Red/Blue Team exercises, OWASP compliance checks, code reviews, and incident response planning. Ideal for securing projects, identifying vulnerabilities, and ensuring robust security posture across development and operational environments.

Enables agents to perform authorized security assessments, blue team exercises, and penetration testing on AI products, agents, and infrastructure. Uses first-principles reasoning to identify vulnerabilities like prompt injection and tool abuse, generating evidence-based security reports without relying solely on payload libraries.

Design and manage AWS Virtual Private Cloud (VPC) networking infrastructure for production environments. This skill covers subnet isolation, routing tables, security groups, and network segmentation. It includes configuring Internet Gateways, NAT Gateways, and VPC peering for multi-AZ architectures. Use AWS CLI to create VPCs, subnets, and gateways securely. Essential for DevOps engineers setting up secure cloud network foundations.

Manage secrets, keys, and certificates securely in Azure Key Vault using CLI. Configure access policies, implement RBAC, and handle encryption operations. Essential for DevOps security and cloud infrastructure administration.

Learn to design and implement Azure network infrastructure including Virtual Networks, Subnets, Network Security Groups, and Azure Firewall. Covers hub-spoke topology, VNet peering, and private endpoints using Azure CLI and Terraform. Essential for building secure and scalable cloud network environments in production.

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

Conduct comprehensive security assessments on cloud infrastructure across Azure, AWS, and GCP. Includes identity management testing, S3 enumeration, and service account compromise analysis. Requires explicit authorization and defensive guidance protocols.

Design and implement CI/CD pipelines, Docker configurations, and deployment strategies with production-ready patterns. Covers GitHub Actions, multi-stage builds, and infrastructure automation for reliable software delivery. Includes security best practices and debugging workflows.

Provision and manage fully managed relational databases on Google Cloud Platform, including PostgreSQL, MySQL, and SQL Server. Configure high availability, automated backups, security settings, and private IP connections. Suitable for production workloads requiring ACID transactions and regional failover. Includes Terraform configuration examples for infrastructure as code deployment.

Learn to design and secure network infrastructure on Google Cloud Platform. This skill covers creating VPCs, configuring firewall rules, setting up Cloud NAT, and deploying load balancers. It also includes implementing Cloud Armor for security and Private Service Connect for private access. Essential for DevOps engineers managing GCP environments.

A comprehensive guide featuring best practices and patterns for building robust GitLab CI/CD pipelines. Covers multi-stage deployments, containerization (Docker), infrastructure as code (Terraform), security scanning, caching strategies, and advanced GitOps workflows for automated testing and deployment to Kubernetes.

Detects hardcoded secrets like API keys, tokens, and passwords embedded in source code, configuration files, or Infrastructure as Code (IaC). Used when an agent can access its codebase to identify security vulnerabilities at rest. Focuses on secrets stored in files rather than runtime leaks.