查找技能

Identify runtime signs of attackers breaking out of Docker or Kubernetes containers. Review namespace changes, privilege abuse, sensitive host access, and unusual system calls to guide incident investigations and compare monitoring coverage across security tools.

中文简介正在准备中。当前显示英语简介。

• Investigating a suspected Docker or Kubernetes container escape
• Choosing runtime behaviors to monitor for escape attempts
• Comparing escape detection coverage across security sensors

Detect unexpected changes in running containers by comparing them with their original images and monitoring execution and file activity. Use Falco or Microsoft Defender for Containers to investigate changes and guide isolation, replacement, and preventive configuration.

中文简介正在准备中。当前显示英语简介。

• Finding unexpected binaries executed inside running containers
• Investigating package installations and file changes at runtime
• Checking whether containers still match their approved images

Deploy decoy credentials, documents, and URLs with Canarytokens to detect suspicious access. Guides token generation, placement, alert testing, and inventory tracking, with email or webhook notifications when someone interacts with a planted token.

中文简介正在准备中。当前显示英语简介。

• Add intrusion alerts to shared folders
• Detect use of decoy cloud credentials
• Monitor decoy documents for signs of data theft

Set up encrypted connections between devices with Tailscale and control access by user or device. The skill covers network routing, device name resolution, and self-hosting the coordination server with Headscale.

中文简介正在准备中。当前显示英语简介。

• Replacing a traditional VPN with Tailscale
• Restricting server access by team or device
• Connecting remotely to internal networks

Build a GitLab CI/CD pipeline with automated checks for vulnerable code, dependencies, container images, running applications, and exposed secrets. Covers scanner configuration, consolidated findings, and approval policies for serious vulnerabilities before production deployment.

中文简介正在准备中。当前显示英语简介。

• Add automated security scans to .gitlab-ci.yml
• Check dependencies and container images for known vulnerabilities
• Detect credentials and API keys committed to source control

Audit Kubernetes access rules to find excessive permissions and service account token abuse paths. Trace which users or workloads could gain cluster administrator access, then produce prioritized findings and recommendations for reducing permissions.

中文简介正在准备中。当前显示英语简介。

• Reviewing Kubernetes privilege escalation paths
• Checking permissions after an RBAC change
• Tracing workloads with overprivileged service accounts

Set up and run kube-bench to check Kubernetes configuration against CIS security benchmarks. Select the appropriate benchmark and cluster components, then export JSON or JUnit results for automated pipelines and troubleshoot skipped checks or incorrect detection.

中文简介正在准备中。当前显示英语简介。

• Setting up kube-bench for the first time
• Selecting benchmark versions and scan targets
• Exporting JSON or JUnit results for CI

Audit Kubernetes RBAC, the rules that assign access through roles, to identify excessive permissions, risky role assignments, and paths to gaining higher privileges. Review service accounts and produce findings with recommended permission changes.

中文简介正在准备中。当前显示英语简介。

• Reviewing access permissions in shared Kubernetes clusters
• Finding accounts that can read secrets or gain higher privileges
• Checking service account token mounts

Audit Terraform infrastructure definitions and planned changes for excessive permissions, public exposure, and missing encryption. Use security scanners and custom rules to produce actionable findings and add automated checks before cloud infrastructure is deployed.

中文简介正在准备中。当前显示英语简介。

• Reviewing Terraform modules and plans before deployment
• Adding security checks to Terraform CI/CD pipelines
• Enforcing organization-specific infrastructure rules

Analyze Kubernetes API server audit logs to identify pod access, secret reads, permission changes, privileged pods, and anonymous requests. Use the event patterns to reconstruct suspicious activity and develop detection rules for security monitoring systems.

中文简介正在准备中。当前显示英语简介。

• Tracing API activity during a suspected cluster compromise
• Reviewing access to Kubernetes secrets
• Investigating permission changes and privileged pods

Plan backend services and APIs, from service responsibilities and interface definitions to authentication, failure handling, monitoring, and rollout. Produces architecture diagrams, API specifications, and documented tradeoffs based on business and operational requirements.

中文简介正在准备中。当前显示英语简介。

• Designing an order management API
• Defining responsibilities across multiple services
• Planning retries and timeouts for external integrations

Improve resumes for software engineering, technical product management, data, and DevOps roles. Organize technical skills, connect achievements to business results, and highlight projects in a format suited to applicant tracking systems, software used to process job applications, and recruiters.

中文简介正在准备中。当前显示英语简介。

• Organize technical skills for a target role
• Rewrite experience to show technical and business impact
• Choose projects to highlight during a career change

Configure machine learning training and batch jobs across multiple clouds with SkyPilot. The skill guides GPU selection, lower-cost cloud and region choices, and automatic recovery when discounted spot instances are interrupted.

中文简介正在准备中。当前显示英语简介。

• Choose a lower-cost cloud for GPU training
• Run long training jobs with recovery after interruptions
• Configure distributed training across multiple machines

Review security across web apps, APIs, mobile apps, Kubernetes, and AI agents using six OWASP references. Identify risky authentication, access controls, configurations, and prompt handling, then use examples and checklists to plan fixes.

中文简介正在准备中。当前显示英语简介。

• Review login flows and access controls
• Check API authorization and data exposure
• Review mobile app storage and communications

Adapt machine learning training to run across multiple GPUs or machines with Ray Train. Covers changes to existing code, comparing training settings with Ray Tune, and saving checkpoints so training can resume after failures.

中文简介正在准备中。当前显示英语简介。

• Adapting existing PyTorch code for multiple GPUs
• Training HuggingFace models across multiple machines
• Comparing learning rates and batch sizes with Ray Tune

Design and implement systems that collect, transform, validate, and store data for analysis. Covers scheduled and real-time processing, data warehouses, quality checks, monitoring, and cost tuning using tools such as Apache Spark, dbt, and Airflow.

中文简介正在准备中。当前显示英语简介。

• Building scheduled data collection and transformation workflows
• Designing a data warehouse for analysis
• Synchronizing database changes in real time

Build an investor fundraising presentation as a single PowerPoint file. The skill adapts the narrative, metrics, charts, and funding request to the company’s financing stage and business sector, with checks for numerical clarity and slide quality.

中文简介正在准备中。当前显示英语简介。

• Preparing a seed fundraising presentation
• Explaining growth metrics for a Series B round
• Presenting technical milestones for a deep tech raise

Analyze large logs, test results, API responses, and files outside the conversation, then return focused findings. It guides agents to save, process, index, and search outputs while limiting how much raw data enters their working context.

中文简介正在准备中。当前显示英语简介。

• Extracting errors from large logs
• Summarizing test failures and build warnings
• Inspecting JSON and CSV data

Add a read-only web dashboard for browsing NanoClaw agents, sessions, and other resources. It builds tables from command-line JSON output and includes message activity charts, recent logs, and a viewer for skills, profiles, and CLAUDE.md files.

中文简介正在准备中。当前显示英语简介。

• Check agent and session status in a browser
• Review message counts and daily activity
• Read recent host logs

Install rtk in NanoClaw agent containers to compress development command output and reduce token use. A Claude Code hook automatically routes Bash calls through rtk, with runtime checks to verify installation and a command to inspect savings.

中文简介正在准备中。当前显示英语简介。

• Reduce token use from development command output
• Automatically route Bash calls through rtk
• Configure rtk for multiple agent groups

Find information across connected workplace sources by turning a question into targeted searches. The skill adapts queries for each source, ranks and deduplicates results, and combines findings into an answer about decisions, status, documents, or policies.

中文简介正在准备中。当前显示英语简介。

• Find past decisions across chats and documents
• Check project status across connected sources
• Locate specifications or internal policies

Build and review Kubernetes Operators, controllers that keep custom resources in their desired state. Included tools check resource definitions and Go reconciliation code, then assess operational capabilities and suggest improvements.

中文简介正在准备中。当前显示英语简介。

• Designing custom resource definitions for a new Operator
• Reviewing Go reconciliation code for common mistakes
• Assessing Operator capabilities and planning improvements

Define service reliability targets, choose measurements that reflect user experience, and calculate error budgets—the failures a target allows. Generate alert thresholds and review existing definitions for unrealistic targets, unclear metrics, and missing response policies.

中文简介正在准备中。当前显示英语简介。

• Defining reliability targets for a new service
• Calculating allowed downtime and alert thresholds
• Reviewing existing reliability definitions

Design and operate shared secret storage with HashiCorp Vault or cloud services. The skill guides access policies, automated credential rotation, temporary credentials, audit analysis, and secret delivery to applications and deployment pipelines.

中文简介正在准备中。当前显示英语简介。

• Setting up Vault or a cloud secret store
• Automating database password and API key rotation
• Auditing access to secrets