All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,595
- 817
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 3,169–3,192 of 19,595 skills
- Azure BlobAzure Blob Storage service administration and design: storage accounts, access tiers (Hot/Cool/Cold/Archive), ADLS Gen2, lifecycle management, object replication, immutability (WORM), private endpoints, NFS 3.0, SFTP, and Microsoft Defender for Storage. Use for \"Azure Blob\", \"Blob Storage\", \"storage account\", \"access tier\", \"ADLS Gen2\", \"Data Lake Storage\", \"hierarchical namespace\", \"Azure archive\", \"blob lifecycle\", \"object replication\", \"immutability\", \"WORM Azure\", ...Votes: 0GitHub stars: 4
- XpanseExpert agent for Palo Alto Cortex Xpanse EASM. Covers internet-wide scanning, exposure prioritization, automated remediation via XSOAR/Cortex, Xpanse API, and integration with Cortex XDR and Prisma Cloud. WHEN: \"Xpanse\", \"Cortex Xpanse\", \"Palo Alto EASM\", \"Xpanse attack surface\", \"internet scanning Palo Alto\", \"Xpanse automated remediation\".Votes: 0GitHub stars: 4
- WizExpert agent for Wiz cloud security platform. Covers agentless CNAPP, Security Graph, toxic combinations, attack path analysis, CSPM/CWPP/CIEM/DSPM/CDR, Wiz Code shift-left, Wiz Defend runtime, AI-SPM, and multi-cloud configuration. WHEN: \"Wiz\", \"Wiz Security Graph\", \"toxic combination\", \"Wiz attack path\", \"Wiz CSPM\", \"Wiz CWPP\", \"Wiz Code\", \"Wiz Defend\", \"AI-SPM Wiz\", \"Wiz policy\", \"Wiz connector\".Votes: 0GitHub stars: 4
- VenafiExpert agent for Venafi / CyberArk Machine Identity Security. Covers TLS Protect (on-prem + cloud), CodeSign Protect, SSH Protect, certificate lifecycle management, machine identity policy, SPIFFE/SPIRE integration, and CyberArk acquisition context. WHEN: \"Venafi\", \"TLS Protect\", \"CodeSign Protect\", \"machine identity\", \"Venafi Trust Protection Platform\", \"Venafi Cloud\", \"Venafi Firefly\", \"certificate discovery\", \"MSSP\", \"certificate policy enforcement\".Votes: 0GitHub stars: 4
- SysdigExpert agent for Sysdig Secure CNAPP platform. Covers Falco-based runtime security, image scanning with in-use context, Kubernetes posture (KSPM), CDR, identity/network security, GRC, risk prioritization using runtime context, and Sysdig Monitor observability. WHEN: \"Sysdig\", \"Sysdig Secure\", \"Sysdig runtime\", \"Sysdig image scanning\", \"Sysdig KSPM\", \"Sysdig CDR\", \"Sysdig in use\", \"Sysdig Falco\", \"Sysdig posture\", \"Sysdig Monitor\", \"Sysdig agent\".Votes: 0GitHub stars: 4
- SuricataExpert agent for Suricata IDS/IPS/NSM. Covers rule writing, EVE JSON logging, AF_PACKET/DPDK capture, protocol parsers, JA3/JA4 fingerprinting, file extraction, datasets, suricata-update, performance tuning, and IPS inline mode. WHEN: \"Suricata\", \"EVE JSON\", \"suricata rule\", \"suricata-update\", \"ET rules\", \"Emerging Threats\", \"JA3\", \"JA4\", \"AF_PACKET\", \"Suricata IPS\", \"suricata.yaml\", \"threshold.config\".Votes: 0GitHub stars: 4
- SublimeExpert agent for Sublime Security. Covers MQL (Message Query Language), YAML detection rules, programmable email security, open-source community detections, and API-based M365/Google Workspace integration. WHEN: \"Sublime Security\", \"Sublime\", \"MQL\", \"Message Query Language\", \"email detection rules\", \"programmable email security\", \"Sublime YAML rules\", \"open source email detection\".Votes: 0GitHub stars: 4
- StackhawkExpert agent for StackHawk CI/CD-native DAST. Covers stackhawk.yml configuration, HawkScan Docker runner, authenticated scanning, API scanning, GitHub/GitLab/Jenkins/CircleCI integration, and developer-focused DAST workflows. WHEN: \"StackHawk\", \"HawkScan\", \"stackhawk.yml\", \"hawkscan\", \"StackHawk DAST\", \"hawk scan\", \"stackhawk API scan\".Votes: 0GitHub stars: 4
- SplunkSplunk as a SIEM/security platform across all versions (9.x-10.x): SPL query development for security detection, indexer/search head architecture, forwarder management, SmartStore, CIM normalization for security data models, knowledge objects, and deployment at scale. WHEN: \"Splunk\", \"SPL\", \"search head\", \"indexer\", \"forwarder\", \"SmartStore\", \"Splunkbase\", \"props.conf\", \"transforms.conf\", \"data model\", \"saved search\". Do NOT use for general log/metrics observability, IT ...Votes: 0GitHub stars: 4
- Splunk EsSplunk Enterprise Security (ES), the premium SIEM app on top of Splunk: correlation searches, notable events, risk-based alerting (RBA), MITRE ATT&CK framework mapping, adaptive response actions, asset/identity correlation, threat intelligence framework, and ES content management. WHEN: \"Splunk ES\", \"Enterprise Security\", \"notable events\", \"risk-based alerting\", \"RBA\", \"correlation search\", \"adaptive response\", \"glass tables\", \"investigation workbench\", \"ES content update\"...Votes: 0GitHub stars: 4
- SopsExpert agent for Mozilla SOPS (Secrets OPerationS). Covers file encryption (YAML/JSON/ENV/INI), AWS KMS, GCP KMS, Azure Key Vault, age, and PGP backends, partial file encryption, GitOps patterns, and Flux/ArgoCD integration. WHEN: \"SOPS\", \"Mozilla SOPS\", \"sops encrypt\", \"sops decrypt\", \"GitOps secrets\", \"age encryption\", \"SOPS ArgoCD\", \"SOPS Flux\", \"encrypted yaml git\".Votes: 0GitHub stars: 4
- SonarqubeExpert agent for SonarQube and SonarCloud. Covers quality gates, quality profiles, Clean Code taxonomy, SonarScanner setup, branch analysis, PR decoration, Security Hotspots, taint analysis, and OWASP/CWE mappings. WHEN: \"SonarQube\", \"SonarCloud\", \"SonarLint\", \"quality gate\", \"quality profile\", \"sonar-project.properties\", \"SonarScanner\", \"Security Hotspot\", \"new code period\", \"clean code\".Votes: 0GitHub stars: 4
- SnykExpert agent for Snyk developer security platform. Covers Snyk Code (SAST), Snyk Open Source (SCA), Snyk Container, Snyk IaC, Snyk AppRisk (ASPM), IDE plugins, CLI, CI/CD integration, and auto-fix PRs. WHEN: \"Snyk\", \"Snyk Code\", \"Snyk Open Source\", \"Snyk Container\", \"Snyk IaC\", \"SCA\", \"dependency scanning\", \"Snyk CLI\", \"auto-fix PR\", \"AppRisk\".Votes: 0GitHub stars: 4
- SnortExpert agent for Snort 3 IDS/IPS. Covers Snort 3 architecture (inspectors, codecs, DAQ), rule syntax with sticky buffers and service keyword, OpenAppID, hyperscan, Talos rule updates, and migration from Snort 2. WHEN: \"Snort\", \"Snort 3\", \"Snort rule\", \"Talos rules\", \"OpenAppID\", \"DAQ\", \"Snort inspector\", \"snort.lua\", \"Snort 2 migration\", \"hyperscan\".Votes: 0GitHub stars: 4
- SmallstepExpert agent for smallstep step-ca and step CLI. Covers lightweight internal PKI, OIDC-based certificate issuance, short-lived certificates, SSH certificates (user and host), Kubernetes integration, ACME support, and zero-trust patterns. WHEN: \"smallstep\", \"step-ca\", \"step CLI\", \"step certificate\", \"SSH certificate authority\", \"OIDC certificate\", \"short-lived cert\", \"step-ca ACME\", \"step-ca Kubernetes\".Votes: 0GitHub stars: 4
- SentineloneExpert agent for SentinelOne Singularity EDR platform. Covers Storyline technology, autonomous response, 1-click rollback, Deep Visibility threat hunting, Purple AI, Ranger network discovery, and STAR rules. WHEN: \"SentinelOne\", \"Singularity\", \"Storyline\", \"Deep Visibility\", \"Purple AI\", \"1-click rollback\", \"Ranger\", \"STAR rule\", \"S1 agent\".Votes: 0GitHub stars: 4
- Prisma CloudExpert agent for Palo Alto Prisma Cloud / Cortex Cloud CNAPP platform. Covers CSPM, CWPP Defender agents, CIEM, DSPM, code-to-cloud pipeline security, AppDNA, and Cortex XDR convergence. WHEN: \"Prisma Cloud\", \"Cortex Cloud\", \"Prisma Cloud Defender\", \"CWPP Defender\", \"AppDNA\", \"Prisma CSPM\", \"Prisma CIEM\", \"code-to-cloud\", \"Prisma IaC\", \"Prisma runtime\", \"Palo Alto cloud security\".Votes: 0GitHub stars: 4
- PkiRouting agent for PKI and Certificate Lifecycle Management. Delegates to Let's Encrypt, Venafi, DigiCert, cert-manager, EJBCA, and smallstep specialists. Handles PKI design, CA hierarchy, X.509 concepts, ACME protocol, and certificate automation strategy. WHEN: \"PKI\", \"certificate authority\", \"CA hierarchy\", \"TLS certificate\", \"certificate lifecycle\", \"ACME\", \"X.509\", \"certificate rotation\", \"certificate renewal\", \"CLM\", \"machine identity\". Do NOT use for vendor-specific...Votes: 0GitHub stars: 4
- OrcaExpert agent for Orca Security CNAPP platform. Covers agentless SideScanning technology, CSPM, CWPP, CIEM, DSPM, API security, AI-SPM, risk prioritization, and shift-left CI/CD integration. WHEN: \"Orca Security\", \"Orca SideScan\", \"Orca CNAPP\", \"Orca cloud security\", \"Orca risk score\", \"Orca CSPM\", \"Orca image scanning\", \"Orca shift left\".Votes: 0GitHub stars: 4
- Network SecurityRouting agent for network security technologies including IDS/IPS, NAC, and micro-segmentation. Cross-platform expertise in detection methodology, network visibility, east-west vs north-south traffic, and network forensics. WHEN: \"IDS\", \"IPS\", \"NAC\", \"network access control\", \"micro-segmentation\", \"network detection\", \"east-west traffic\", \"lateral movement detection\", \"network visibility\", \"Suricata\", \"Snort\", \"Zeek\", \"Cisco ISE\", \"ClearPass\", \"FortiNAC\", \"Illum...Votes: 0GitHub stars: 4
- MendExpert agent for Mend (formerly WhiteSource) enterprise SCA platform. Covers dependency scanning, license compliance, vulnerability management, Renovate bot integration, SBOM export, and CI/CD integration. WHEN: \"Mend\", \"WhiteSource\", \"Mend SCA\", \"mend.io\", \"Renovate\", \"Renovate bot\", \"WhiteSource bolt\", \"Mend for Containers\".Votes: 0GitHub stars: 4
- LogscaleExpert agent for CrowdStrike Falcon LogScale (formerly Humio). Provides deep expertise in LQL query development, index-free streaming architecture, real-time search, Falcon EDR integration, bloom filters, data compression, community edition, and high-volume log analytics. WHEN: \"LogScale\", \"Falcon LogScale\", \"Humio\", \"LQL\", \"LogScale query\", \"streaming SIEM\", \"index-free\", \"CrowdStrike SIEM\", \"LogScale community\".Votes: 0GitHub stars: 4
- Lets EncryptExpert agent for Let's Encrypt free TLS certificates via ACME. Covers certbot, acme.sh, HTTP-01/DNS-01/TLS-ALPN-01 challenges, 90-day and 6-day certificate lifetimes, wildcard certificates, rate limits, staging environment, and automation best practices. WHEN: \"Let's Encrypt\", \"certbot\", \"acme.sh\", \"ACME\", \"free TLS\", \"LEGO\", \"Certify The Web\", \"short-lived certificate\", \"6-day certificate\", \"ACME challenge\", \"DNS-01 challenge\".Votes: 0GitHub stars: 4
- InfisicalExpert agent for Infisical open-source secrets manager. Covers self-hosted and cloud deployments, dynamic secrets, internal PKI, secret rotation, RBAC, Kubernetes operator, Terraform provider, and CLI. WHEN: \"Infisical\", \"Infisical self-hosted\", \"Infisical operator\", \"Infisical dynamic secrets\", \"Infisical PKI\", \"Infisical CLI\", \"infisical run\", \"Infisical secret rotation\".Votes: 0GitHub stars: 4