Skill UI

Provides practical advice on Dockerfiles, CI/CD pipelines, deployment strategies, infrastructure-as-code, and observability, helping teams containerize apps, configure GitHub Actions, plan production rollouts, and keep deployments secure and observable.

This expert provides advanced, practical knowledge across the entire lifecycle of containerized applications. Core expertise includes multi-stage Dockerfile optimization, container security hardening (non-root users, minimal attack surface), and advanced orchestration using patterns like Docker Compose. Ideal for ensuring robust, secure, and production-ready deployments.

Automates dockerfile authoring with best practices for DevOps basics, guiding users from containerization patterns to CI/CD-ready configurations while validating outputs against standards.

A comprehensive guide for deploying complex integrations to production cloud environments (GCP, Kubernetes). This skill covers best practices including creating multi-stage Dockerfiles, implementing robust health and readiness checks, and utilizing cloud tools like gcloud and kubectl for seamless, secure deployment with secret management.

Guides sales engineers through RFP/RFI analysis, competitive feature matrices, POC planning, demo prep, and proposal delivery using Python tooling and checkpoints to ensure coverage, differentiators, and win/loss insights.

Automates Waiverfile workflows through Composio’s Rube MCP, guiding you to discover current schemas, manage toolkit connections, and execute tools safely with session reuse and schema compliance.

This skill leverages AI to analyze your application and automatically generate highly optimized Dockerfiles. It incorporates industry best practices like multi-stage builds, minimal base images, and robust security configurations. Use it when containerizing applications or needing to optimize existing Docker configurations for production deployment and efficient orchestration.

Modal delivers cloud-native serverless Python with on-demand GPUs, persistent storage, and web endpoints to deploy ML workloads, batch jobs, and APIs without writing Dockerfiles.

This skill automates the creation of isolated, pre-configured development containers (devcontainers). It scans the project structure to detect supported languages (Python, Node.js, Rust, Go) and intelligently generates the necessary configuration files, VS Code extensions, and setup scripts. It ensures all required tools are installed in a sandboxed environment, making it ideal for starting new multi-language projects or needing consistent, reproducible development workspaces.

Optimizes Dockerfiles and docker-compose files for size, speed, and security. Provides best practices for multi-stage builds, layer caching, and container hardening. Includes analysis tools for production-grade containerization without wasting time or space.

This guide details how to perform authenticated (credentialed) vulnerability scans using industry-leading tools like Nessus, Qualys, and OpenVAS. By utilizing service credentials (SSH, SMB, WinRM, SNMPv3), the scan moves beyond superficial banner checks to deeply inspect installed patches, configurations, and local system settings on Linux, Windows, and network devices. This is crucial for detecting vulnerabilities that unauthenticated scans often miss, significantly improving security assessment accuracy.

This comprehensive guide details methods for testing web applications against directory traversal (path traversal) and local/remote file inclusion (LFI/RFI) vulnerabilities. It covers advanced techniques, including path manipulation, encoding bypasses, and automated fuzzing using tools like ffuf and dotdotpwn. Use this during authorized penetration tests to assess file download, view, or include functionality.