Skill UI

This skill provides a comprehensive guide and code examples for designing robust and scalable Identity and Access Management (IAM) structures within Oracle Cloud Infrastructure (OCI). It covers establishing secure compartment hierarchies, understanding complex policy inheritance rules, implementing least-privilege access controls, and utilizing dynamic groups for service authentication, ensuring best practices for enterprise cloud governance.

Provides a comprehensive, production-ready standard 3-tier reference architecture for Oracle Cloud Infrastructure (OCI). The design covers essential components like VCN, public/private subnets, Internet Gateway, NAT Gateway, Service Gateway, and Autonomous Database. It includes deployment steps using Terraform and OCI SDK Python code, making it ideal for designing new cloud environments or migrating existing patterns from other major cloud providers.

This skill provides a comprehensive guide for safely upgrading the Oracle Cloud Infrastructure (OCI) Python SDK and Terraform provider. It addresses known breaking changes, schema modifications, and version incompatibility issues common in OCI tools. By implementing version pinning, pre-upgrade testing, and structured rollback procedures, users can ensure a stable and reliable migration process for both code and infrastructure definitions.

This advanced skill automates the entire lifecycle of cloud infrastructure deployment. Instead of manual documentation review, it researches current best practices across multi-cloud platforms (AWS, GCP, Azure), synthesizes a coherent deployment strategy, and generates production-grade Infrastructure as Code (IaC). It outputs comprehensive artifacts, including Terraform modules, Kubernetes manifests, CI/CD pipelines, monitoring setups, and cost estimates, ensuring secure and optimized deployment.

This guide details the standard project layout for Webiny applications. It explains the critical role of `webiny.config.tsx` as the single, central configuration point for registering all custom extensions. It covers various extension types, including API endpoints, Admin UI components, Infrastructure configuration (AWS), and CLI commands, helping developers understand where and how to integrate custom code.

This playbook provides expert-level techniques for exploiting common infrastructure services that are exposed without proper authentication. Coverage includes Redis RCE, Rsync data theft, PHP-FPM code execution, AJP file reads, and MongoDB/Hadoop vulnerabilities. Essential for deep penetration testing and security auditing.

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

This workflow systematically analyzes deployed AWS resources and Infrastructure-as-Code (IaC) definitions. It collects usage metrics from CloudWatch and Cost Explorer to identify over-provisioning, unused resources, and inefficient configurations (e.g., right-sizing EC2, S3 lifecycle policies). It generates actionable cost optimization recommendations and creates structured GitHub issues for tracking and implementing savings.

This workflow automates the AWS Well-Architected Framework (WAF) review. It scans Infrastructure as Code (IaC) files (Terraform, CloudFormation, CDK) and deployed AWS resources against 6 pillars (Security, Reliability, etc.). It identifies risks, generates detailed findings, and automatically creates trackable GitHub issues for remediation, ensuring adherence to industry best practices.

Dep handles the entire journey from local code to production deployment. This skill automates containerization using Docker and docker-compose, establishes robust CI/CD pipelines (linting, testing, security scanning, deployment), manages environment variables and secrets, and generates Infrastructure as Code (Terraform/Pulumi) configurations. It ensures observability and provides rollback procedures.

This skill designs and audits the core engineering harness required for reliable AI agent collaboration within a codebase. It establishes critical infrastructure elements such as change tracking, linting rules, CI/CD gates, and standardized documentation, ensuring the repository remains the single source of truth for all intelligent agents. Ideal for setting up complex development workflows.

This tool conducts structured reviews of various Infrastructure-as-Code (IaC) tools (e.g., Terraform, Pulumi) across multiple cloud providers. It generates an actionable report that categorizes findings by severity (Critical, High, Medium, Low), providing detailed remediation steps and a reusable best-practice checklist for continuous security, compliance, and operational auditing.