Skill UI

Implements end-to-end FIDO2/WebAuthn hardware security key authentication, covering server configuration, registration and authentication ceremonies, YubiKey enrollment, and passkey migration so high-value accounts gain phishing-resistant, passwordless MFA.

Uses AWS Athena to define forensic tables and run queries against CloudTrail, VPC Flow, S3 access, and ALB logs, helping security teams detect unauthorized access, data exfiltration, lateral movement, and privilege escalation during incident investigations.

Performs comprehensive iOS app security audits with Frida and Objection for dynamic instrumentation, SSL pinning bypass, keychain dumps, and IPA static analysis to validate OWASP MASTG controls during authorized pentests.

Generate CodeTour .tour files tailored to personas like new joiners, reviewers, architects, RCA investigators, and security auditors, using real files and line anchors for onboarding, PR reviews, architecture tours, or “explain how this works” guides.

Checklist for securing Solidity AMMs, detailing reentrancy defenses, CEI ordering, donation manipulation guards, oracle hardening, slippage checks, reserve math safety, and audit tooling for liquidity pools and swap flows.

Automates CI/CD pipeline setup, from linting and type checks to integration, E2E, security, and deployment stages, plus feedback loops for AI agents and preview deployments.

This skill guides developers on integrating Firebase AI (Gemini) into Flutter applications. It covers essential topics including initial setup and configuration, generating text and managing multi-turn chat responses, implementing real-time streaming output, handling multimodal prompts (text and images), and ensuring robust error handling, security, and adherence to data privacy best practices.

This comprehensive guide details how to correctly implement Firebase App Check for Flutter applications. It covers selecting platform-specific attestation providers (like Android Play Integrity and Apple DeviceCheck), configuring debug tokens, handling token refresh, and setting up enforcement mechanisms. Use this skill to significantly harden your app's security against abuse, ensuring only legitimate clients can access protected backend resources.

A comprehensive guide for securely implementing Firebase Authentication within Flutter applications. This skill covers setup, managing authentication state changes (e.g., `authStateChanges`), and implementing various sign-in methods, including email/password, Google, and Apple social logins. It also provides best practices for error handling, security, and user profile management.

This comprehensive guide details how to correctly implement and manage Firebase Realtime Database within Flutter applications. It covers critical best practices including data modeling (using flattened JSON trees), utilizing real-time listeners, ensuring offline persistence, performing atomic transactions, and implementing security rules. Ideal for applications requiring extremely low-latency synchronization and constant state monitoring.

This skill provides comprehensive guidance for setting up production-grade Continuous Integration/Continuous Deployment (CI/CD) pipelines for Go projects using GitHub Actions. It covers all critical stages, including rigorous unit testing with race detection, advanced linting, static application security testing (SAST) via tools like CodeQL and govulncheck, automated dependency management (Dependabot/Renovate), container image building, and automated binary release using GoReleaser. Use this when building a robust quality gate for a Go codebase.

This guide provides comprehensive best practices for Go code quality using the industry-standard `golangci-lint` tool. It covers the full development workflow, including initial setup and configuration of `.golangci.yml`, running linters (like govet, staticcheck), automatically fixing issues, correctly suppressing warnings using `//nolint` directives, and interpreting complex linter output to ensure high code maintainability and security.