Skill UI

Provides offensive security testing methodology, tooling guidance, and workflows for scanning web apps, APIs, dependencies, secrets, and infrastructure to uncover vulnerabilities before attackers exploit them.

Guides calling Feishu IM APIs to retrieve chat histories, thread replies, cross-chat searches, and media/file downloads while handling pagination, time filters, and permission constraints so agents can answer questions about past conversations.

Guides designing stable, well-documented interfaces for APIs, module boundaries, and component props to make correct usage easy and inadvertent mistakes difficult.

A comprehensive guide to creating production-ready, idiomatic Go applications. Covers critical patterns such as functional options, robust error handling, graceful shutdown, resource management, and architectural best practices. Ideal for refactoring existing Go code, choosing between architectural patterns, or designing scalable APIs and constructors.

This skill acts as a Go modernization engineer, keeping codebases current with the latest Go idioms and standard library improvements. It proactively detects deprecated APIs, outdated patterns, and suggests adopting modern features (like `errors.Is`, `slog`, etc.). It supports both inline, contextual suggestions during active coding, and full-scan review for CI/CD pipelines, ensuring code safety, correctness, and readability.

Guides Go developers through struct/interface design best practices, covering interface segregation, composition, dependency injection, type assertions, and choosing pointer vs value receivers to keep APIs clear and testable.

Checks Microsoft SDK code by verifying API signatures, fetching docs, and finding Azure samples before writing or reviewing code that touches .NET or Microsoft APIs.

This guide teaches how to build well-structured and robust ASP.NET Minimal APIs. It covers best practices for API organization, defining clear DTOs with proper validation, handling strongly-typed parameters, and leveraging modern C# features. Crucially, it demonstrates how to generate comprehensive, standards-compliant OpenAPI/Swagger documentation using built-in .NET features, ensuring APIs are fully documented for seamless consumption.

This guide outlines comprehensive best practices for documenting C# APIs using XML comments. It provides detailed rules for writing summaries, documenting parameters, return values, constructors, properties, and handling exceptions. Following these standards ensures that C# codebases are highly maintainable, readable, and easily understood by other developers.

A comprehensive workflow for discovering, integrating, and utilizing third-party APIs and SDKs. This skill guides the process by first detecting the project language, ensuring necessary guidelines and skills are present, systematically fetching API details, and providing structured guidance on authentication, model usage, and endpoint implementation. It tracks integration progress by recording specific development milestones (e.g., SDK setup, first call made).

This comprehensive guide outlines established best practices for developing robust, scalable, and high-quality enterprise applications using Spring Boot and Java. It covers structuring projects, implementing dependency injection, designing RESTful APIs, managing transactions, securing endpoints, and utilizing advanced testing strategies (Unit, Integration). Ideal for developers aiming for industry-standard code quality.

This comprehensive guide outlines best practices for developing high-quality, idiomatic, and maintainable enterprise applications using Kotlin and Spring Boot. It covers architectural patterns, dependency injection using primary constructors, managing state with data classes, implementing robust RESTful APIs, handling transactions, and leveraging Kotlin features like null safety and Coroutines for asynchronous programming. It also provides guidance on modern testing strategies (Kotest, Testcontainers).