Skill UI

Explains configuring OWASP ZAP baseline, full, and API scans within CI/CD pipelines, tuning scan policies, interpreting findings, and gating deployments through GitHub Actions or GitLab CI to ensure runtime vulnerabilities are caught before release.

Integrates CodeQL and Semgrep into GitHub Actions pipelines to automate SAST scans on pull requests and pushes, upload SARIF reports, tune rules, and block merges when high-severity vulnerabilities appear.

Guides Laravel TDD using PHPUnit and Pest, covering unit, feature, and integration layers, database strategies like RefreshDatabase/DatabaseTransactions, and factory/fake techniques for reliable coverage in new features, bug fixes, and persistence checks.

Performs authorized clickjacking attack tests by checking frame headers, embedding targets in iframes, and crafting proof-of-concept overlays to verify whether sensitive actions can be hijacked during penetration testing.

Guides DevSecOps teams to harden GitHub Actions by pinning actions to SHAs, restricting GITHUB_TOKEN permissions, guarding secrets, avoiding script injection, and enforcing workflow change approvals.

Guide for building full-stack web apps with SvelteKit, covering file-based routing, SSR/SSG, API endpoints, form actions, and layouts so you can deliver fast, developer-friendly experiences with a single framework.

This skill utilizes the GitHub CLI (`gh`) to streamline interactions with GitHub repository resources. Users can check PR statuses, list and inspect CI/CD workflow runs, fetch detailed failure logs, and perform advanced data queries via the GitHub API. It is essential for debugging build failures, managing pull requests, and automating repository workflow directly from the terminal.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

A powerful operational companion for database developers. This skill assists with the daily lifecycle of database interactions, including translating natural language requirements into optimized SQL queries, generating database migrations, performing comprehensive schema introspection across multiple dialects (PostgreSQL, MySQL, SQLite, SQL Server), and identifying performance bottlenecks through detailed query optimization and index recommendations. It also supports ORM patterns like Prisma and SQLAlchemy.

Real-time detection pipeline that watches entropy spikes, file system I/O, and behavioral heuristics to flag ransomware-style encryption routines before they propagate and to help trigger containment actions.

Guides idiomatic C# and .NET patterns covering immutability, explicit intent, dependency injection, async usage, configuration binding, result handling, and repository abstractions to build robust, maintainable applications.

Provides MCP and REST-based Jira integrations to fetch, analyze, update, comment, transition, and link tickets directly from an AI coding workflow, helping developers surface requirements, track progress, and automate Jira interactions.