Skill UI

Automates the final pre-release verification by running documentation, quality, testing, and security gates through the Centinela QA agent before shipment, then records results and verdict in docs for each version.

This skill provides expertise in TanStack Query (React Query), a powerful tool for asynchronous state management in modern React and Next.js applications. It covers advanced patterns like data fetching, cache invalidation, optimistic updates, and handling SSR hydration, ensuring highly performant and reliable data layers.

A comprehensive guide for building modern, accessible, and scalable user interfaces using the shadcn/ui component library. This document outlines core principles, best practices for component composition, styling rules (including Tailwind CSS usage), and structured approaches for forms and layouts. Essential for developers building complex design systems and ensuring code consistency.

This utility converts a single, high-level objective into a comprehensive, step-by-step build plan suitable for complex, multi-agent, or multi-session engineering projects. It automatically handles dependency mapping, detects parallel steps, and structures each step with self-contained context briefs, ensuring any new agent can execute it without prior knowledge. Ideal for large-scale refactoring or feature development spanning multiple PRs.

This skill orchestrates the entire coding lifecycle as a state machine, ensuring tasks proceed from issue intake through implementation, structured review, deployment, and final acceptance verification. It enforces a rigorous 'Definition of Done' (DoD) proof, moving beyond simple code changes. Ideal for complex feature development requiring structured handoffs and explicit verification evidence.

A comprehensive collection of six expert-level, structured workflows designed to elevate AI assistance from ad-hoc querying to repeatable, production-grade engineering practices. Users can evaluate prompts, design RAG architectures, plan context budgets, run security audits, build eval harnesses, and coach product strategy.

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This tool provides comprehensive forensic analysis for Microsoft Outlook PST and OST files. It extracts critical evidence such as message content, detailed headers, attachments, and deleted items using open-source libraries like libpff and Python, supporting legal investigations and incident response.

This skill analyzes the cryptographic algorithms, key management systems, and file encryption routines employed by various ransomware families. It covers hybrid schemes like AES-RSA and modern ciphers such as ChaCha20. Use this when assessing data recovery feasibility, reverse engineering ransomware binaries, identifying implementation weaknesses (e.g., IV reuse, key derivation flaws), or developing custom decryptor tools.

A specialized tool and workflow for investigating supply chain attacks. It helps security analysts analyze compromised software updates, trojanized binaries, and dependency artifacts by comparing legitimate versions against suspect files. Key functions include binary diffing, identifying injected code, and documenting code signing anomalies to determine the scope of a security breach.

This comprehensive guide details how to design and implement an end-to-end DevSecOps pipeline leveraging GitLab CI/CD. It integrates crucial automated security checks—such as SAST, DAST, container scanning, dependency scanning, and secret detection—directly into the development workflow. By adopting this approach, teams can effectively 'shift left' security, identifying and mitigating vulnerabilities early in the development lifecycle to ensure compliance and robust application security.

This comprehensive guide details the multi-step workflow for responding to sophisticated phishing incidents. It covers everything from initial triage and detailed email header analysis to analyzing malicious URLs and attachments in sandboxes. Key steps include determining the scope of impact, implementing immediate containment actions (like purging emails and revoking sessions), and executing thorough remediation to neutralize the threat and recover affected accounts.