Skill UI

A comprehensive workflow for establishing and maturing a Third-Party Risk Management (TPRM) program. This guide covers the entire vendor lifecycle, from initial inventory and risk tiering to conducting due diligence (SOC 2, ISO 27001), embedding security requirements in contracts, and ensuring continuous monitoring and secure offboarding. Essential for compliance and supply chain risk management.

This skill provides comprehensive methods and frameworks to detect sophisticated AI attacks, including model extraction, membership inference, and model inversion, which abuse inference APIs. It focuses on monitoring per-principal query volume, input distribution, and confidence exposure. Use it for securing public or partner inference APIs, or for conducting pre-deployment red-teaming to assess the model's extractability and overall security posture against MITRE ATLAS techniques.

A comprehensive skill for managing AWS operational excellence, cost governance, and observability. It provides guidance on pre-deployment cost estimation (TCO), detailed spending analysis using Cost Explorer, setup of CloudWatch alarms, auditing activity via CloudTrail, and overall security posture assessment. Essential for optimizing cloud spending and ensuring reliable infrastructure.

Scan project dependencies for known CVEs and outdated packages using npm audit and security CLI tools. Covers severity triage, safe opt-in auto-fix workflow, and continuous monitoring hooks before releases or after lockfile changes.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

Manage GitHub repositories effectively through issue triaging, PR reviews, and CI/CD workflow debugging. Automate release management and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and developer experience.

This tool provides a structured way to run predefined, periodic background workers (e.g., security audits, performance optimization, memory consolidation). It utilizes native scheduling mechanisms to automatically dispatch and re-schedule tasks within a session, ensuring continuous system maintenance and optimal performance monitoring.

Comprehensive skill for FedRAMP certification and compliance under CR26. Covers authorization paths, Certification Classes A-D, SSP/SAP/SAR/POA&M documentation, NIST SP 800-53 control mapping, FedRAMP 20x, OSCAL mandate, 3PAO assessments, continuous monitoring, and gap assessments. Ideal for cloud service providers and security teams navigating federal cloud authorization.

A comprehensive, risk-based framework for assessing third-party vendors, critical for compliance with global regulations like DORA, NIS2, and GDPR. It provides a structured, three-phase process covering financial, legal, security, and operational risks. Ideal for vendor onboarding, supply chain security audits, and ongoing vendor monitoring in regulated industries.

Implement comprehensive audit logging for compliance, security monitoring, and forensic analysis across infrastructure and applications. Configure log retention, integrate with SIEM platforms, and establish tamper-proof audit trails for regulatory requirements like SOC 2 and HIPAA.

This skill provides expert guidance on AWS cost optimization, monitoring, and operational excellence. It integrates MCP servers for cost estimation, analysis, CloudWatch metrics, alarms, and security auditing. Use it to analyze bills, estimate deployment costs, set up observability, and assess security posture effectively.

Provision and manage Amazon RDS relational databases including PostgreSQL, MySQL, and SQL Server. Configure backups, replication, security, and monitoring using AWS CLI. Ideal for deploying production-grade managed databases with high availability and performance tuning.