Cloud

Detects and prevents code injection attacks targeting serverless functions (AWS Lambda, Azure Functions, Google Cloud Functions) through event source…

Configure the public webhook endpoint for Miko — ngrok, Cloudflare Tunnel, or custom URL.

Deploy applications and websites to Vercel.

Modern attack surfaces beyond traditional pentesting — LLM/AI security (prompt injection, model poisoning), supply chain attacks, blockchain/smart contract…

Guide users to manage Alibaba Cloud resources using the Aliyun CLI command-line tool.

Deploy HTML pages, static directories, or custom edge functions to Alibaba Cloud ESA edge nodes.

AWS Lambda Python conventions: handler structure, Powertools logging/tracing/metrics, input validation, error handling, batch partial failures, idempotency…

Push user stories from story maps to issue trackers.

Connects a domain the user already owns (bought at another registrar) to their DropTheHassle site, free, with one A record.

Cloudflare CLI management via the flarectl tool.

Author and review Cloudflare Workers code against production best practices.

Use when scaling a dedicated Kubernetes cluster (Linode LKE or AWS EKS) on Zeabur — listing node pools, changing node counts, or adding/removing node pools.

Use when renting a new dedicated server.

Bun as runtime, package manager, bundler, and test runner.

Generate deployment artifacts for ML models -- FastAPI serving code, Dockerfiles, cloud configs, batch prediction scripts, and monitoring setup.

AWS IAM / Resource Policy 分析方法论。当目标涉及 AWS 云服务且提供了 IAM Policy、Resource Policy、Lambda 代码、CloudFormation 模板等策略文件时使用。覆盖 IAM Policy 危险模式识别、Resource Policy…

AWS IAM 权限提升专项方法论。当已获取 AWS 凭据并需要提升权限、发现当前 IAM 用户/角色权限有限需要横向或纵向提权、或需要分析 IAM Policy 寻找提权路径时使用。覆盖 46 个 AWS 服务的提权技术，包括 PassRole 滥用、AssumeRole 链式提权、Lambda/EC2/ECS…

AWS 云环境渗透测试总体方法论。当目标使用 AWS 云服务、发现 AWS 相关资产（S3 Bucket/EC2 实例/Lambda 函数/CloudFront 分发）、获取 AWS 凭据（AK/SK/Session Token/IAM Role）、或需要对 AWS…

AWS 后渗透与持久化专项。当已获取 AWS 高权限（Admin/PowerUser）或特定服务权限后，需要进行数据窃取、横向移动到其他账户/区域、建立持久化后门、或清理攻击痕迹时使用。覆盖 S3/RDS/DynamoDB/EBS 数据窃取、跨账户 AssumeRole…

Azure AD / Entra ID 攻击方法论。当目标使用 Microsoft 365/Azure 云环境、发现 Azure AD 认证流程、或获取到 Azure 凭据时使用。覆盖初始访问（Password Spray/Phishing）、令牌窃取、Service Principal 滥用、条件访问绕过、跨租户攻击

This skill should be used when the user asks to "pentest AWS", "test AWS security", "enumerate IAM", "exploit cloud infrastructure", "AWS privilege…

Build a new evolution "wave" of living organs for the IXpansion organism (api/*.py modules) — scaffold organs, wire routes, sync manifests, bump versions…

Set up Cloudflare Turnstile end-to-end in a project — scan the codebase, create the widget via the Cloudflare API, deploy the managed siteverify Worker, write…

Bun 作为运行时、包管理器、打包器和测试运行器。何时选择 Bun 与 Node、迁移说明以及 Vercel 支持。