Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

Evaluates infrastructure setups against SOC2, HIPAA, and PCI-DSS, highlights violations, and recommends fixes when users request compliance checks or audit reports.

Automates compliance and security audit reporting for standards such as PCI DSS, HIPAA, SOC 2, and ISO 27001 by using the compliance-report-generator plugin to collect details, format documentation, and streamline regulatory proof.

This skill provides comprehensive guidance on achieving PCI DSS (Payment Card Industry Data Security Standard) compliance. It covers best practices for designing, implementing, and auditing secure payment processing systems, including network protection, data encryption, tokenization, and adhering to strict data minimization policies.

Automates PCI DSS validator work by guiding advanced security practitioners through best practices, generating production-ready code/configurations, and validating results against compliance frameworks.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

This expert simulates a compliance expert, specializing in regulatory requirements for software systems, including GDPR, HIPAA, SOC2, and PCI-DSS. It performs comprehensive audits, identifies compliance gaps, and generates actionable implementation plans, technical controls, and policy templates to ensure adherence to industry standards.

Perform Static Application Security Testing (SAST) to identify critical security vulnerabilities, including SQL injection, XSS, hardcoded secrets, and path traversal, directly from source code. Supports multi-language ecosystems (Python, JavaScript, Java, Go, etc.) and major frameworks, enabling crucial pre-deployment security validation and compliance checks (OWASP, PCI-DSS).

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

Validates PCI DSS compliance by running the pci-dss-validator plugin on codebases or infrastructure configs, then reports violations and remediation steps for developers, security engineers, and compliance officers.

Implement AWS Config rules for continuous compliance monitoring of AWS resources, align managed and custom rules with CIS/PCI DSS, activate SSM Automation remediation, and aggregate multi-account compliance data.

Implementing AWS Security Hub to centralize findings, map CIS/PCI DSS/NIST standards, and automate remediation with EventBridge/Lambda across multi-account environments for clearer compliance dashboards.