Skill UI

This skill specializes in building robust, scalable, and cloud-native backend microservices using the latest .NET 8 and C# 12 features. It masters modern architectural patterns, including Clean Architecture, CQRS with MediatR, and minimal APIs. Expertise covers secure authentication (JWT), data persistence with Entity Framework Core, asynchronous programming best practices, and comprehensive unit/integration testing, ensuring highly maintainable and performant code.

This SDK provides comprehensive tools for developing enterprise-grade, multi-channel agents for the Microsoft 365 ecosystem. Utilizing ASP.NET Core hosting, it supports integration with Teams, Copilot Studio, and general M365 services. Key features include robust agent application routing, structured state management, and secure authentication using MSAL.

This SDK provides Azure Functions extensions for handling Microsoft Entra ID custom authentication events within a .NET environment. Developers can intercept key stages of the authentication lifecycle, such as token issuance, attribute collection, and OTP sending. Use cases include enriching access tokens with custom claims, fetching external user data to populate profiles, and customizing the sign-up user experience.

A comprehensive guide for authorized penetration testers on identifying and exploiting insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET). Covers techniques for generating payloads using tools like ysoserial and phpggc, and testing various application components such as cookies, HTTP parameters, and message queues to achieve potential Remote Code Execution (RCE).

This script is designed for malware analysis, specifically targeting .NET-based Remote Access Trojans (RATs) like Agent Tesla. It automatically extracts embedded and obfuscated configuration data, including SMTP credentials, FTP endpoints, Telegram tokens, and C2 webhooks. It utilizes advanced techniques such as regex pattern matching, Base64 decoding, and simulating XOR/SHA256 decryption to reveal critical threat intelligence for security research.

A comprehensive guide for analyzing .NET malware (C#, VB.NET, F#) using professional tools like dnSpy and de4dot. Learn to decompile code, identify obfuscation techniques (ConfuserEx, SmartAssembly), extract C2 configurations, and debug malicious behavior in stealers and RATs.

This guide provides comprehensive testing patterns for C# and .NET applications. It covers best practices using xUnit, FluentAssertions, and advanced techniques like mocking (NSubstitute/Moq), parameterized testing, and full integration testing using Testcontainers and WebApplicationFactory. Ideal for improving test quality, coverage, and developing robust, maintainable codebases.

This comprehensive guide covers idiomatic C# and modern .NET best practices for building robust, high-performance, and maintainable applications. Topics include immutability, dependency injection, explicit coding, proper async/await usage, the Options pattern, and the Result pattern. Essential reading for developers designing services with ASP.NET Core.

Checks Microsoft SDK code by verifying API signatures, fetching docs, and finding Azure samples before writing or reviewing code that touches .NET or Microsoft APIs.

Query authoritative Microsoft documentation to explain Azure, .NET, M365, Windows, and Power Platform concepts, tutorials, limits, configurations, or best practices whenever a user wants to understand how something works.

Guides agents through researching Microsoft technologies via Learn MCP docs, then scaffolds hybrid skills that store essential knowledge locally while enabling dynamic lookups for depth.

This guide teaches how to build well-structured and robust ASP.NET Minimal APIs. It covers best practices for API organization, defining clear DTOs with proper validation, handling strongly-typed parameters, and leveraging modern C# features. Crucially, it demonstrates how to generate comprehensive, standards-compliant OpenAPI/Swagger documentation using built-in .NET features, ensuring APIs are fully documented for seamless consumption.