Skill UI

Design and manage AWS Virtual Private Cloud (VPC) networking infrastructure for production environments. This skill covers subnet isolation, routing tables, security groups, and network segmentation. It includes configuring Internet Gateways, NAT Gateways, and VPC peering for multi-AZ architectures. Use AWS CLI to create VPCs, subnets, and gateways securely. Essential for DevOps engineers setting up secure cloud network foundations.

SOTA computer vision expert specializing in YOLO26, SAM 3, vision language models, and real-time spatial analysis. Provides guidance on designing, implementing, and optimizing advanced vision pipelines, including detection, segmentation, visual reasoning, depth estimation, and 3D reconstruction.

This skill covers configuring host-based and cloud firewalls using iptables, nftables, and UFW. It includes implementing network segmentation, traffic filtering, and security zone policies. Suitable for securing server perimeters, migrating firewall technologies, and responding to security incidents. Requires Linux root access and network knowledge.

Train object detection, image classification, and SAM/SAM2 segmentation models locally or on Hugging Face Jobs with dataset validation and Hub saving.

This skill provides a comprehensive guide for implementing security policies in Kubernetes clusters, including NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards. It covers network segmentation, least-privilege access, compliance policies, and admission control to ensure defense-in-depth security for multi-tenant environments.

A comprehensive automation toolkit for Mixpanel product analytics, accessible via Rube MCP. Automate key data tasks including event aggregation, detailed segmentation, conversion funnel analysis, user profile management, cohort tracking, and running custom JQL queries. Ideal for data analysts and product managers needing to deeply analyze user behavior patterns.

Harden self-hosted OpenClaw deployments with threat modeling, host baselines, runtime controls, secret management, network segmentation, and recovery workflows.

Implement PCI DSS v4.0 requirements for protecting cardholder data across the Cardholder Data Environment (CDE). Guides SAQ selection, network segmentation, encryption, access controls, and ongoing testing for payment card processing.

Implement zero-trust network architecture with identity-based access, micro-segmentation, and continuous verification. Covers BeyondCorp-style access, Cloudflare Access configuration, and OAuth2 Proxy deployment for securing modern applications.