Skill UI

Provides systematic methods for diagnosing complex, intermittent errors in the Replit environment. This guide covers advanced topics like container lifecycle issues, Nix build failures, memory leaks, and deployment crash loops using sophisticated shell scripting and runtime monitoring techniques. Use when standard troubleshooting steps fail to identify the root cause.

This advanced guide provides strategies for scaling Sentry in high-traffic, enterprise-level applications handling millions of events daily. It details implementing adaptive sampling based on endpoint criticality, using adaptive error deduplication to manage quotas, and optimizing the SDK for minimal runtime overhead, ensuring robust visibility even under extreme load.

This guide provides a comprehensive setup for Vercel observability. It covers enabling built-in analytics, collecting detailed runtime logs, implementing structured logging, configuring external log drains (e.g., Datadog, Sentry), and integrating OpenTelemetry tracing. Use this when monitoring production deployments and setting up robust error tracking.

This guide teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous, comprehensive threat detection across entire AWS accounts and workloads. It covers enabling protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting various finding severity levels, and building robust, automated incident response playbooks using EventBridge and AWS Lambda for immediate containment actions.

This skill detects unauthorized modifications (container drift) to running containers by monitoring for deviations from the original image state. It monitors binary execution drift, file system changes, and configuration deviations using tools like Falco and Kubernetes security contexts. Essential for SOC analysts and security teams investigating runtime compromises and enforcing immutable infrastructure.

This skill provides comprehensive methods for detecting and preventing privilege escalation within Kubernetes pods and containers. It details using runtime tools like Falco for monitoring syscalls and capabilities, and implementing admission controls via OPA Gatekeeper or Pod Security Admission to enforce security best practices, thereby hardening the cluster against unauthorized access and dangerous configurations.

This utility implements comprehensive Cloud Workload Protection (CWPP) by monitoring compute workloads on cloud instances (EC2/GCE). It provides runtime security controls, detecting process anomalies, unauthorized binary execution, cryptomining activity, and suspicious network connections using AWS and Google APIs. Ideal for establishing robust security postures and meeting compliance requirements.

This skill provides a comprehensive guide to hardening managed Kubernetes clusters on major cloud platforms (EKS, AKS, GKE). It details implementing critical security layers, including Pod Security Standards, least-privilege network policies, workload identity (eliminating static cloud credentials), and runtime security monitoring. Essential for securing production environments and meeting compliance requirements.

A comprehensive guide on implementing advanced security observability using eBPF and Cilium Tetragon. This skill covers real-time tracking of process execution, network connections, and file system access directly in the kernel. Learn how to author TracingPolicy CRDs, utilize kprobe/tracepoint hooks for in-kernel filtering, and enforce runtime security policies (e.g., process killing) on Linux hosts or Kubernetes clusters.