THINKING
DATACENTERS
TECHNICAL GUIDE
STRATUM AI Studio · AIST-04

Skills & Capability Nodes

Understand every built-in STRATUM AI Studio Skill, how Skills add operational capability, and how typed Skill outputs connect capability into the Operator DAG.

CAPABILITY

Skills are the Operator’s reusable hands

Roles describe how the Operator should think about a domain. Skills describe what operational capability it can bring to that domain. A Skill can package supported tools, planning guidance, configuration fields and verification expectations into a reusable node that can be attached to the Operator DAG.

A Skill in Arsenal does not have to become globally active just because it exists. AI Studio is where the Skill is instantiated, configured and connected to an Operator. That keeps capability explicit and versionable instead of turning every uploaded Skill into invisible global behavior.

FIGURE 01Built-in Platform and Identity Skills
FIGURE 02Built-in Operating System and Web Skills
FIGURE 03Built-in Database and Network Skills
FIGURE 04Built-in General Skills
SKILL CATALOG

Every current built-in Skill

Platforms

  • Kubernetes Cluster Operations — Inspect and operate Kubernetes clusters, workloads, nodes, events and rollout state through a reusable cluster-operations capability.
  • OpenShift Installation & Operations — Adds OpenShift-aware installation and operational workflows, including platform-specific cluster state and deployment behavior.
  • Rancher Management Operations — Adds Rancher-oriented cluster management and administrative capability when Rancher is the management surface.
  • RKE2 Cluster Operations — Adds RKE2-specific cluster operations for environments using the RKE2 Kubernetes distribution.

Identity

  • Active Directory Operations — Adds Active Directory operational capability for directory objects and Windows identity infrastructure.
  • LDAP Server Operations — Adds LDAP-aware server and directory operations for non-AD directory environments.
  • Windows DNS Server Operations — Adds Windows DNS-specific administration and verification behavior.

Operating Systems

  • Fresh Linux VM Deployment — Turns a newly provisioned Linux VM into a deployable base system and provides the capability output used by downstream planning.
  • Fresh Windows VM Deployment — Provides the Windows equivalent: fresh guest deployment and initial operating-system preparation.
  • Linux System Administration — Adds reusable Linux administration capability for services, packages, files, processes and system configuration.
  • Windows Event Log Analysis — Adds Windows event-log analysis as evidence for diagnosis and verification.
  • Windows System Administration — Adds reusable Windows administration capability for operating-system and service work.

Web

  • Apache HTTP Server Operations — Adds Apache HTTP Server install, configuration, service and validation knowledge.
  • Microsoft IIS Operations — Adds Microsoft IIS deployment, configuration and operational verification.
  • NGINX Operations — Adds NGINX install, configuration, service lifecycle and endpoint verification.

Databases

  • MySQL / MariaDB Server Operations — Adds MySQL/MariaDB server setup, configuration and operational tasks.
  • Oracle Database Server Operations — Adds Oracle Database-oriented operational capability.
  • PostgreSQL Server Operations — Adds PostgreSQL server deployment, configuration and health verification.
  • SQLite File Database Maintenance — Adds maintenance behavior for SQLite file databases where database state is managed as application data rather than a standalone database service.

Network

  • Cisco Router / Switch / Firewall Operations — Adds Cisco network-device operations to the Operator for routing, switching and firewall tasks.
  • DNS Administration — Adds general DNS administration and validation across supported DNS environments.
  • End-to-End Network Troubleshooting — Correlates topology, guest networking, routes, DNS, packet evidence and application reachability instead of treating each network layer as a separate troubleshooting island.
  • Linux DNS Server Operations — Adds Linux-hosted DNS server operations and service verification.
  • Palo Alto Firewall Operations — Adds Palo Alto firewall-aware operating capability for policy and network-security changes.

General

  • Configuration Artifact Deployment — Deploys approved versioned configuration content from Arsenal as part of an infrastructure Mission.
  • Dependency-Aware Infrastructure Change — Forces change planning to consider dependency relationships before mutating infrastructure.
  • Guest OS Maintenance and Repair — Adds guest-maintenance and repair operations for existing VMs.
  • Skill — The generic built-in Skill node: use it when a custom Skill definition is being represented directly rather than through one of the named built-ins.
  • Software Installation — Adds software-package and installer deployment using controlled artifacts and guest operations.
  • STRATUM Guest Tools — Adds installation and verification of STRATUM Guest Tools as a reusable capability.
  • Structured Application UI Operation — Adds controlled application-UI interaction for software whose management surface is graphical or structured rather than purely API/CLI driven.
  • Unattended Base OS Deployment — Adds unattended operating-system deployment for repeatable base-image creation.
  • Web Service Troubleshooting — Adds application-path diagnosis from guest/service state through listener, DNS/TCP path and endpoint verification.
CAPABILITY WITHOUT HIDDEN AUTHORITY.

A Skill can make the Operator dramatically more capable, but it does not get to bypass Scope, No-Go Zones, policy gates, approval or verification. Capability plugs into governance; it does not replace it.