Skill UI

This skill provides robust, automated guardrails for web scraping pipelines using Firecrawl. It enforces critical policies to ensure compliance and stability, including domain blocklists (preventing scraping prohibited sites), managing API credit budgets, filtering low-quality content (e.g., error pages, thin content), and implementing granular per-domain rate limiting. Use this when building highly reliable, legal, and cost-efficient scraping solutions.

This guide details how to build and manage a robust two-tier Public Key Infrastructure (PKI) using OpenSSL. Learn to establish a Root CA and an Intermediate CA, issue server and client certificates, configure Certificate Revocation Lists (CRLs), and implement best practices for secure key management and certificate policy enforcement, ensuring compliance and high security standards.

This skill details the deployment of Cisco Identity Services Engine (ISE) for comprehensive network access control. It utilizes 802.1X, MAC Authentication Bypass (MAB), and posture assessment to centralize policy enforcement. ISE acts as a RADIUS policy server, providing dynamic VLAN assignment, downloadable ACLs, and robust authentication for both wired and wireless enterprise environments.

A comprehensive guide to deploying Palo Alto Networks Next-Generation Firewalls (NGFWs). Covers advanced security techniques like App-ID for application awareness, User-ID for identity mapping, zone-based policy enforcement, SSL decryption, and robust threat prevention profiles. Essential for building enterprise-grade network security architectures.

OPA Gatekeeper is a powerful Kubernetes admission controller that enforces policies using Rego rules. It utilizes ConstraintTemplates and Constraints to validate, mutate, or deny API requests at the cluster admission stage. This tool is essential for implementing policy-as-code practices, ensuring that Kubernetes deployments adhere to organizational security standards, compliance requirements, and best practices, such as mandating labels or blocking privileged containers.

Pod Security Admission (PSA) is a built-in Kubernetes admission controller designed to enforce Pod Security Standards (Baseline, Restricted, Privileged) at the namespace level. It serves as a crucial replacement for the deprecated PodSecurityPolicy (PSP), allowing users to implement robust security controls and maintain compliance. By applying specific labels, administrators can set enforcement modes (enforce, audit, warn) to harden container environments against unauthorized privilege escalation and security risks.

This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for robust policy-as-code enforcement. Learn to write complex Rego policies, deploy OPA Gatekeeper as a Kubernetes admission controller, and integrate policy evaluation into CI/CD pipelines to enforce security and compliance across clusters.

Tetragon, a CNCF project under Cilium, provides advanced, kernel-level runtime security observability and policy enforcement in Kubernetes clusters. By utilizing eBPF, it monitors process execution, file access, and network connections with minimal overhead, enabling detection and prevention of container escapes, unauthorized access, and suspicious activity.

This comprehensive guide outlines the phased rollout process for DMARC (Domain-based Message Authentication, Reporting, and Conformance). It details moving from monitoring (p=none) through quarantine (p=quarantine) to full rejection (p=reject). Adopting DMARC is critical for anti-spoofing, ensuring that only authorized senders can use your domain, thereby significantly reducing phishing and unauthorized email traffic.

A governance skill designed to secure AI agent tool calls using advanced authorization policies. It implements Cedar policies to control which tools agents can access and under what conditions. Key features include running in 'Shadow mode' for safe observation, 'Enforce mode' for strict blocking, and generating cryptographically signed Ed25519 receipts to provide an immutable, tamper-evident audit trail for every policy decision.

Implements automated, multi-layered policy enforcement and guardrails for Adobe integrations. This skill provides crucial security checks, including detecting sensitive credentials (e.g., p8_ secrets), pre-screening content for services like Firefly (blocking trademarks or explicit material), and enforcing usage quotas for PDF Services. It is essential for maintaining secure and compliant CI/CD pipelines.

Implements automated policy enforcement and guardrails for Canva Connect API integrations. This system enforces best practices such as preventing hardcoded credentials, ensuring proper rate limit handling (429 responses), and validating robust OAuth configurations. It is essential for maintaining high code quality and security in CI/CD pipelines and pre-commit hooks.