Skill UI

A comprehensive guide for implementing Cloud Security Posture Management (CSPM) across multi-cloud environments (AWS, Azure, GCP). Learn how to use specialized tools like Prowler and ScoutSuite, combined with native cloud services (Security Hub, Defender, SCC), to continuously monitor for misconfigurations, compliance violations (CIS, SOC 2), and security drifts, thereby enforcing security guardrails in complex cloud architectures.

The GCP Organization Policy Service allows administrators to enforce centralized security guardrails and governance policies across an entire resource hierarchy (organization, folder, project). By defining constraints (List, Boolean, Custom), users can restrict risky resource configurations, ensuring compliance with internal security standards and external regulations. Ideal for security architecture, compliance checks, and cloud governance implementation.

This guide details the comprehensive implementation of privileged session monitoring and recording using Privileged Access Management (PAM) solutions, such as CyberArk PSM. It covers essential steps including architectural routing, configuring keystroke logging, real-time risk analysis, and establishing secure, tamper-proof audit trails for critical administrative access (RDP, SSH, Databases). Essential for meeting strict compliance standards like SOX, HIPAA, and PCI-DSS.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

This framework implements robust input and output validation guardrails for LLM-powered applications. It prevents prompt injection, detects and redacts PII, filters toxic content, and validates model outputs against defined schemas. Use it when deploying AI agents that handle sensitive data or require strict adherence to corporate policies, ensuring a secure and trustworthy AI interaction layer.

A specialized cognitive psychology skill designed to engineer highly engaging headlines, subject lines, and titles. It utilizes principles like the curiosity gap, self-relevance, and contrast to create compelling hooks for marketing copy, landing pages, emails, and social media ads. It ensures attention-grabbing power while maintaining ethical guardrails and promise continuity.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

Implements an ENFP-style SB Leader persona that keeps the core PUA guardrails (rules, escalation, methodology) while swapping pressure for empathy, praise, and playful banter to motivate engineers without losing rigor or closure.

This comprehensive guide outlines essential best practices and structural checks for developing robust Salesforce Apex code. It covers critical areas such as preventing governor limit exceptions (e.g., bulk safety), enforcing security (CRUD/FLS), preventing SOQL injection, adhering to sharing models, and implementing modern Apex idioms. It also mandates rigorous testing strategies (Positive, Negative, Bulk) and proper trigger architecture.

This guide details how to implement robust content safety guardrails for applications powered by Claude. It covers essential techniques such as system prompt hardening, input validation to detect injection patterns and length limits, and output validation to prevent system prompt leakage. It ensures compliance with Anthropic's policies, making the AI integration secure and reliable.

Implements automated, multi-layered policy enforcement and guardrails for Adobe integrations. This skill provides crucial security checks, including detecting sensitive credentials (e.g., p8_ secrets), pre-screening content for services like Firefly (blocking trademarks or explicit material), and enforcing usage quotas for PDF Services. It is essential for maintaining secure and compliant CI/CD pipelines.

This comprehensive skill provides multi-layered guardrails for integrating with LLMs like Claude. It enforces security and compliance by implementing input validation (PII detection, length checks), system prompt restriction (scope control, safety rules), output filtering (preventing sensitive data leakage), cost governance, and model access policies. Ideal for building secure, robust, and governed AI applications.