Skill UI

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

A comprehensive system for implementing policy guardrails in data enrichment pipelines. It enforces critical controls including credit spending limits, blocks the enrichment of sensitive PII (e.g., SSN, bank details), and validates input data quality. Essential for maintaining compliance (GDPR/CCPA) and managing costs when processing large volumes of personal and business data.

Generates production-ready auto-scaling configurations for apps and infrastructure, covering Kubernetes HPAs and scaling policies so you can handle load spikes, enforce high availability, and keep resource usage efficient.

Automatically assists with generating Content Security Policies, offering step-by-step guidance, production-ready code, and validation against common standards whenever you mention or ask about CSP generation.

Automates cors policy validator tasks in the Security Fundamentals domain, offering best-practice guidance, prompt validation, and production-ready configuration snippets whenever you ask about cors policy patterns or hardening.

A comprehensive guardrail system for external search APIs (like Exa). It enforces content safety policies, manages domain access via allow/blocklists, sanitizes queries to prevent misuse, implements result freshness checks, and enforces per-user usage quotas. Essential for building reliable, secure, and cost-controlled integrations.

This skill provides robust, automated guardrails for web scraping pipelines using Firecrawl. It enforces critical policies to ensure compliance and stability, including domain blocklists (preventing scraping prohibited sites), managing API credit budgets, filtering low-quality content (e.g., error pages, thin content), and implementing granular per-domain rate limiting. Use this when building highly reliable, legal, and cost-efficient scraping solutions.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

Provides automated guidance for Google Cloud Storage lifecycle policy scenarios, including pattern recommendations, production-ready configurations, and best practices for compute, storage, BigQuery, Vertex AI, and other GCP-specific services.

This skill executes the complete policy lifecycle within the Guidewire PolicyCenter system via the Cloud API. It guides users through essential steps such as creating new accounts, submitting applications, quoting policies, binding coverage, issuing the final policy, and managing endorsements or renewals. It is ideal for automating core insurance business processes.

A comprehensive guide for implementing and managing Role-Based Access Control (RBAC) within the Guidewire InsuranceSuite (PolicyCenter, ClaimCenter, BillingCenter). It details role hierarchies (Admin, Underwriter, Claims Adjuster), permission checking logic using APIs, and best practices for ensuring regulatory compliance (NAIC, DOI). Includes code examples for user provisioning and audit logging.

This skill provides foundational examples for interacting with Guidewire's core cloud APIs, including PolicyCenter, ClaimCenter, and BillingCenter. It demonstrates how to execute initial RESTful API calls, query resources (like accounts and claims), and understand common API response structures, pagination, and error handling patterns. Ideal for connectivity testing, learning Guidewire's REST structure, and prototyping basic insurance integrations.