Browse Skills

Postgres Hypertable Migration plans and executes migration of PostgreSQL tables to TimescaleDB hypertables, including partition column selection, chunk interval calculation, constraint handling, and validation. Use it after identifying candidate tables to convert with minimal downtime.

PostgreSQL Database Migration helps plan, test, and safely execute PostgreSQL schema migrations on production data. Use it to understand DDL lock levels, perform zero-downtime ALTER TABLE changes, backfill data, and plan rollbacks.

Checks that all Amazon Machine Images (AMIs) in your AWS account follow your organization's naming convention, helping maintain a consistent asset inventory.

Audits Amazon EC2 instances to confirm only organization-approved AMIs are used, providing manual verification and remediation steps. Enforces consistent, secure machine images across AWS environments.

Audits that communications between applications and clients in AWS SimSpace Weaver are encrypted in transit, per CIS AWS Compute benchmark 16.1. Use this skill to verify application-level encryption (e.g., TLS) for secure deployments.

Audit and enforce AWS Lambda code signing configurations to prevent deployment of unverified or tampered code. Use for security compliance and integrity verification in serverless applications.

Audit and remediate AWS Lambda environment variables to ensure they are encrypted in transit, meeting CIS benchmark control 12.12. Use when securing Lambda functions against unauthorized access to sensitive data.

AWS Post-Exploitation maps 92 AWS CLI programs for reconnaissance, credential harvesting, privilege escalation, persistence, and cleanup after compromising AWS access. Use it when you need scripted post-compromise workflows in AWS.

Bun File I/O covers the preferred file-reading, writing, scanning, and deletion patterns used in this repo. Use it when working on file operations or directory handling with Bun and node:fs helpers.

CI Assessment performs read-only security checks on GitHub Actions workflows, token permissions, secrets exposure, runners, and branch protection. It also reviews dependencies and supply-chain settings from a local checkout.

CICD Attacks describes methods for extracting secrets, injecting pipeline steps, and modifying CI/CD workflows in GitHub, Jenkins, or GitLab. Use it when assessing pipeline exposure or validating CI/CD security controls.

Audits AWS Elastic Beanstalk environments to verify that instance log streaming to CloudWatch is enabled, as required by CIS AWS Compute Benchmark 10.2. Use this skill to ensure compliance and persistent log collection for security monitoring.