Skill UI

This guide outlines advanced architectural patterns for building multi-stage CI/CD pipelines. It covers best practices for implementing robust deployment gates, including manual approvals, time-based triggers, and multi-approver workflows. It details various deployment strategies like Rolling, Blue-Green, and Canary releases, ensuring controlled, zero-downtime, and highly reliable software releases.

Uses the GitHub CLI to inspect failing PR checks in GitHub Actions, collect log snippets, draft a fix plan, and implement changes only after explicit approval so CI failures are resolved with clear context.

Automates spoken-word video editing by transcribing footage, detecting mispronunciations or pauses with AI, generating review pages, and surfacing actionable deletion lists for user approval before trimming.

This skill provides a robust and safe mechanism for updating SpecKit templates and configurations from GitHub. It is designed to automatically apply the latest changes while meticulously preserving any existing project customizations, ensuring a non-disruptive workflow. It features a conversational, two-step approval process, guiding the user through the update process, reporting conflicts, and handling fresh installations gracefully. Ideal for developers needing reliable, version-controlled updates to their SpecKit environment.

Generates structured RFC documents to propose and decide on major technical or process changes, guiding stakeholders through options, criteria, and approvals before execution.

This system manages vulnerabilities that cannot be remediated within Service Level Agreement (SLA) timelines. It provides structured workflows for requesting exceptions, documenting compensating controls, obtaining formal risk acceptance approvals, and automatically managing expiration. It helps organizations maintain visibility into accepted risks to comply with major frameworks like PCI DSS, SOC 2, and NIST CSF.

This guide details the implementation of Microsoft Entra Privileged Identity Management (PIM), enforcing Just-in-Time (JIT) role activation, mandatory approval workflows, and periodic access reviews for critical Azure AD and resource roles. It aligns with Zero Trust principles by eliminating standing privileges.

Configure Azure AD Privileged Identity Management via Microsoft Graph API to enumerate eligible and active assignments, request just-in-time activations, audit logs, and enforce MFA or approval policies for zero-trust privileged access scenarios.

This skill provides comprehensive guidance on hardening GitHub Actions CI/CD pipelines against modern supply chain attacks, credential theft, and privilege escalation. It teaches best practices such as pinning actions to immutable SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection from untrusted inputs, and implementing required approval gates for critical deployments.

Enforces explicit user approval before running any delete command so file removals only proceed after permission is granted.

This specialist simulates the role of an App Store reviewer, auditing iOS source code and metadata against Apple's strict guidelines. It systematically identifies potential compliance risks, technical vulnerabilities, monetization gaps (IAP/Subscriptions), and critical UX shortcomings, delivering a prioritized risk register for fast approval.

Scans repository context and chat history to recommend awesome-copilot Custom Agent files that are missing or outdated locally, outlines relevance/rationale, and waits for user approval before installing or updating.