Skill UI

This skill guides the implementation and auditing of advanced container network policies using Calico's specialized CRDs (like GlobalNetworkPolicy and NetworkSet). It enables granular traffic control, zero-trust architectures, and advanced egress filtering based on domain names, which are critical for maintaining strict compliance and isolating workloads across multiple namespaces.

This skill guides users through implementing and managing Kubernetes Pod Security Standards (PSS) using the Pod Security Admission (PSA) controller. Learn how to assign security profiles (Privileged, Baseline, Restricted) to namespaces, audit existing workloads for compliance, plan migrations from deprecated PSPs, and adjust securityContext settings to meet high hardening and compliance requirements.

A comprehensive guide detailing how to implement portable Kubernetes NetworkPolicies to enforce zero-trust microsegmentation. Learn to apply default-deny rules, control ingress and egress traffic, and restrict lateral movement between pods and namespaces across various CNI platforms (Calico, Cilium). Ideal for establishing robust security posture and meeting compliance requirements.

Implement Kubernetes RBAC to enforce least-privilege access across namespaces, covering Role/ClusterRole design, binding configuration, service account hardening, OIDC integration, and audit logging for multi-tenant clusters.

This guide outlines best practices for hardening Kubernetes Role-Based Access Control (RBAC). It focuses on implementing least-privilege principles by auditing and removing excessive cluster-admin bindings, scoping roles to namespaces, separating service accounts, and integrating external OIDC providers. Use this when improving cluster security posture, meeting compliance standards, or mitigating privilege escalation risks.

This tool audits Kubernetes pod configurations to detect potential container escape misconfigurations. It checks for dangerous settings like privileged flags, excessive capabilities, host path mounts, shared namespaces, and cgroup abuses. Use it for comprehensive security assessments, compliance checking, or generating pre-enforcement security posture reports.

A comprehensive guide detailing best practices for executing commands on Windows using PowerShell and CMD. It addresses critical pitfalls such as handling spaces in file paths, ensuring correct character encoding (UTF-8), using native cmdlets, and managing long path limits. Essential for developers building robust, cross-platform Windows automation scripts.

This skill provides comprehensive analysis and structured data extraction for academic research papers hosted on Hugging Face and arXiv. It can read paper content in markdown format, retrieve key metadata (authors, abstracts, GitHub repos), and identify linked assets such as associated models, datasets, and Spaces. Use this when the user provides a Hugging Face or arXiv URL, or explicitly requests a summary or explanation of an AI research topic.

Trackio is an essential library for logging, visualizing, and analyzing machine learning training experiments. It provides multi-interface support: a Python API for real-time metric logging and alert firing during training; a Command Line Interface (CLI) for retrieving historical metrics and alerts; and synchronization capabilities to Hugging Face Spaces for persistent dashboards. This tool is crucial for debugging, diagnosing training issues (like loss spikes), and automating ML workflow iteration.

Creates new Feishu Cloud Docs from Lark-flavored Markdown, letting you optionally target folders, wiki nodes, or knowledge spaces while ensuring structured, rich, and visually varied content.

A `gws chat` CLI skill for Google Workspace that creates and manages Chat spaces, messages, media, and custom emojis while surfacing schema details for each API method.

CLI for managing Google Meet conferences, spaces, recordings, and participants via `gws meet`, offering discovery helpers for commands and schema inspection to automate conferencing workflows.