Skill UI

Validate Claude Code plugin directories against Anthropic and Intent Solutions standards, combining structural checks (plugin.json, permissions) with SKILL.md content grading for marketplace readiness.

Deploys AWS Security Hub as a centralized CSPM to aggregate GuardDuty, Inspector, Macie, and partner findings, enforce CIS/AWS/PCI standards, and drive automated remediation plus compliance reporting across multi-account AWS estates.

Implementing AWS Security Hub to centralize findings, map CIS/PCI DSS/NIST standards, and automate remediation with EventBridge/Lambda across multi-account environments for clearer compliance dashboards.

Implements Kubernetes Pod Security Standards via Pod Security Admission policies, covering privileged, baseline, and restricted profiles plus enforcement modes for deploying secure namespaces and workloads in clusters that require compliance and risk control.

Use OPA Gatekeeper as a Kubernetes admission controller to enforce policy-as-code via ConstraintTemplates, Rego rules, and Constraints so clusters validate, mutate, or deny workloads that violate organizational standards.

Guide for writing YAML-based Semgrep rules to detect app-specific vulnerabilities, enforce coding standards, and plug into CI/CD for continuous SAST assurance across multiple languages.

This comprehensive process validates whether users with elevated permissions (like domain admins, service accounts, and cloud IAM roles) still require their access. It enforces the principle of least privilege by systematically reviewing, certifying, and remediating excessive or orphaned high-level access, ensuring compliance with standards like SOC 2, PCI DSS, and SOX.

This tool performs deep security assessments on SOAP web services. It analyzes WSDL definitions and actively tests for critical vulnerabilities such as XML External Entity (XXE) injection, XPath injection, WS-Security misconfigurations, and SOAPAction spoofing. It is essential for securing complex, enterprise-level APIs and ensuring adherence to industry security standards.

Hardens managed EKS, AKS, and GKE clusters by enforcing Pod Security Standards, network policies, RBAC scoping, image admission controls, workload identity, and runtime monitoring for cloud-specific IAM integrations.

This skill provides a comprehensive framework for validating the integrity and recoverability of critical data backups. It goes beyond simple file checks by implementing cryptographic hash verification (SHA-256), simulating automated restore tests in isolated environments, detecting silent data corruption (bit rot), and scanning for signs of ransomware artifacts. It is crucial for ensuring data reliability against cyberattacks and hardware failures, adhering to standards like NIST CSF.

This skill focuses on building new API connectors or providers for an existing repository by strictly adhering to the host project's established architectural patterns. It goes beyond basic HTTP calls, requiring alignment with the repository's native standards for connector layout, configuration schemas, authentication models, error handling, and testing frameworks. Use this when integrating a new service while maintaining architectural consistency with the current codebase.

Guides building production-ready user interfaces with thoughtful component architecture, consistent spacing, typography, color, and accessibility standards while avoiding generic AI aesthetics and over-configured patterns.