القائمة
Skills في هذا المستودع
جمع SkillsMP عدد ١٬٥٤٠ من skills من MadewellRD/skills-lab. افتح أي skill لمراجعة مصدره وتفاصيله.
MadewellRD/skills-labعرض ٤٠ من أصل ١٬٥٤٠ skills مجمعة.
assemble security compliance evidence across control-to-framework mapping, scope and boundary statements, evidence packages carrying collection method date and population source, control design and operating effectiveness test results, sampling with…
لغة النص الأصلي: الإنجليزية
define and review cryptographic posture, covering the approved algorithm protocol and cipher suite set with dated deprecations, tls and transport configuration, encryption at rest and envelope key hierarchies, password hashing and key derivation, key custody…
لغة النص الأصلي: الإنجليزية
build and assess detection engineering across coverage mapping to named adversary techniques, log source onboarding and field normalization requirements, detection logic as code with unit tests and true-positive samples, backtesting and alert volume…
لغة النص الأصلي: الإنجليزية
assess endpoint and workload hardening across detection and management agent coverage by population, device compliance and enrollment gaps, operating system and browser baseline conformance, patch posture with aging by severity, disk encryption and local…
لغة النص الأصلي: الإنجليزية
review authentication and identity controls, covering single sign-on and federation, mfa strength and phishing resistance, conditional access and its exclusions, session and token lifetime, refresh token revocation, joiner-mover-leaver lifecycle, orphaned and…
لغة النص الأصلي: الإنجليزية
design and assess network security across the zone and segmentation model, east-west and north-south controls, egress filtering and outbound proxy policy, edge protection including web application firewall bot and volumetric defenses, private connectivity and…
لغة النص الأصلي: الإنجليزية
plan and run offensive security work including written authorization and rules of engagement, scope and exclusions, penetration test and red team execution, adversary emulation mapped to techniques a source names, findings with reproduction steps and…
لغة النص الأصلي: الإنجليزية
manage secret exposure and credential handling, covering secret scanning across full repository history, hardcoded credentials in code images build logs and infrastructure state, exposure recorded by locator rather than value, vaulting and dynamic credential…
لغة النص الأصلي: الإنجليزية
define security controls in the delivery pipeline, covering security requirements per change class, design review and threat model triggers, pre-merge gates including branch protection required checks code owners and scanning, pre-release gates,…
لغة النص الأصلي: الإنجليزية
review a system or change design for security control placement, covering trust boundary mapping, data flow analysis, conformance to the reference architecture, deviations and compensating controls, fail-open and fail-closed behavior, blast radius, conditions…
لغة النص الأصلي: الإنجليزية
orchestrate security engagements across attack surface inventory, security architecture review, threat modeling, iam and authorization, cryptography and key management, secrets, secure sdlc, application security, supply chain and dependency risk, cloud…
لغة النص الأصلي: الإنجليزية
run security incident response across triage and severity classification against the org rubric, scoping and timeline reconstruction from evidence, volatile evidence preservation and forensic chain of custody, coordinated containment eradication and recovery,…
لغة النص الأصلي: الإنجليزية
assess software supply chain risk, covering direct and transitive dependency exposure, lockfile and manifest state, reachability analysis and exploitability statements, sbom generation coverage and gaps, dependency confusion and typosquatting, install-time…
لغة النص الأصلي: الإنجليزية
model attacker goals and paths against a system, covering entry points and trust levels, stride categorization, attack trees and chained paths, abuse and misuse cases, business logic and fraud abuse, adversary technique references where a source names them,…
لغة النص الأصلي: الإنجليزية
run third-party security review across vendor tiering and inherent risk rating by data shared and integration depth, attestation and certification review bounded to the stated scope period and exceptions, questionnaire gap analysis against evidence, required…
لغة النص الأصلي: الإنجليزية
run vulnerability management across consolidated and deduplicated findings from every scanner, risk-based prioritization with each severity carrying its scale, asset criticality and exposure weighting, remediation ownership and service level assignment, patch…
لغة النص الأصلي: الإنجليزية
design and review production alerting including symptom-based paging on user impact, multi-window multi-burn-rate rules tied to error budget spend, page versus ticket versus dashboard routing, deduplication grouping inhibition and dependency-aware…
لغة النص الأصلي: الإنجليزية
check backup coverage against the data inventory, record mechanism schedule retention and immutability with their sources, write the restore procedure and its measured time from a dated drill, verify integrity and deletion resistance including ransomware and…
لغة النص الأصلي: الإنجليزية
build the demand model and its drivers, measure headroom against the binding saturation signal rather than average cpu, find quota connection partition thread and licence ceilings, state provisioning lead time, compute failover headroom at real peak, and…
لغة النص الأصلي: الإنجليزية
make production change safe through rollout strategy and staged exposure, canary analysis signals and promotion thresholds, bake time per stage, rollback triggers and whether rollback has ever actually succeeded, freeze policy and its exception path, schema…
لغة النص الأصلي: الإنجليزية
design chaos experiments with an explicit steady-state hypothesis, choose the fault and its scope, contain blast radius with abort criteria written before injection, run game days that exercise responders and runbooks, and promote controls that fail the…
لغة النص الأصلي: الإنجليزية
map the dependency graph along each critical user journey with hard, soft, and degraded-ok coupling, find single points of failure and shared-fate risk across zones clusters datastores identity dns and control planes, analyze failure modes with trigger…
لغة النص الأصلي: الإنجليزية
set rto and rpo per tier with their sources, state the failover mode actually implemented rather than the one designed, define regional evacuation and failback, derive the dependency recovery order across identity dns data tier and control plane, run and…
لغة النص الأصلي: الإنجليزية
run a live production incident with severity declaration, incident commander and operations communications and scribe roles, evidence capture before any mitigating restart, reversible mitigation preferred over diagnosis, internal and customer communication…
لغة النص الأصلي: الإنجليزية
derive a workload model from production traffic, design load stress soak spike and breakpoint profiles with what each proves, state environment fidelity gaps and what they invalidate, measure the saturation point and the behavior past it, and define the…
لغة النص الأصلي: الإنجليزية
design and review on-call rotations and escalation including coverage and follow-the-sun arrangements, primary and secondary tiers with acknowledgement and response expectations, shift handoff and transfer of open state, page load budget and out-of-hours…
لغة النص الأصلي: الإنجليزية
write and facilitate blameless postmortems and incident reviews with a timeline anchored to timestamped evidence, contributing factors across technical detection and process dimensions, counterfactual discipline that resists the single root cause story, a…
لغة النص الأصلي: الإنجليزية
run a production readiness review or support acceptance review with a gate set scored pass, waived, failed, or not assessed against named evidence, a launch or acceptance decision with conditions, waivers carrying a named owner and an expiry date, hand-back…
لغة النص الأصلي: الإنجليزية
run the recurring service reliability review covering error budget attainment and burn across the period, error budget policy adjudication including whether a freeze applies and its exception path, incident page and toil trends, open postmortem actions and…
لغة النص الأصلي: الإنجليزية
design timeout and retry budgets, circuit breakers, bulkheads, load shedding and admission control, backpressure, cache and stale-serve fallbacks, idempotency and replay safety, and graceful degradation modes, and record whether each control is configured,…
لغة النص الأصلي: الإنجليزية
write and review operational runbooks keyed to the alert or failure mode that triggers them, with the first mitigating action stated before diagnosis, diagnostic decision trees carrying exact queries and dashboards, escalation and rollback branches, access…
لغة النص الأصلي: الإنجليزية
map critical user journeys to the services on their path, assign criticality tiers using an explicit tiering rule, attribute ownership and pager rotation per service, and name every service with no owner, no tier, or a rotation that resolves to nobody. use…
لغة النص الأصلي: الإنجليزية
specify service level indicators per critical user journey including the good-event and valid-event definitions, the measurement point and its bias, the implementation query or export behind each indicator, and the split between measured, partially measured,…
لغة النص الأصلي: الإنجليزية
set service level objectives with windows, define and compute the error budget and its balance, account for burn rate over multiple windows, write an error budget policy with consequences that bind someone, and separate objectives agreed with the owner from…
لغة النص الأصلي: الإنجليزية
orchestrate site reliability engineering work across slis, slos, error budgets, capacity planning, load and performance testing, chaos and resilience testing, dependency and failure-mode analysis, disaster recovery, backup and restore, alerting quality,…
لغة النص الأصلي: الإنجليزية
account for operational toil with measured hours and how they were established, classify each recurring task as automatable partially automatable or inherent, define the elimination path per task through automation self-service or a design change that removes…
لغة النص الأصلي: الإنجليزية
define accessibility and seo requirements for web surfaces including wcag, semantic html, keyboard navigation, focus, screen-reader behavior, metadata, structured data, canonicals, sitemaps, robots, crawlability, localization, and page-type search…
لغة النص الأصلي: الإنجليزية
plan web backend integration across api contracts, auth, sessions, bff layers, cms connections, data models, caching, rate limits, pagination, failure modes, and ownership. use when a web surface depends on services, databases, third-party systems, identity,…
لغة النص الأصلي: الإنجليزية
define cms and content operations for web properties including structured content models, editorial workflow, publishing rules, approvals, localization, migration, governance, content debt, metadata ownership, and day-two content maintenance. use for…
لغة النص الأصلي: الإنجليزية
create implementation-ready frontend engineering plans for web surfaces including rendering strategy, routing, layouts, components, state, forms, data fetching, framework constraints, accessibility hooks, performance controls, and coding-agent handoffs. use…
لغة النص الأصلي: الإنجليزية