Skill UI

A comprehensive template for developing modern, full-stack applications. This guide covers architecture overview, file structure, and best-practice code patterns for advanced technology stacks including Next.js, FastAPI, Supabase, and structured AI integration using Claude API. It serves as a robust blueprint for professional development teams.

A comprehensive workflow designed to orchestrate the entire lifecycle of large-scale features, from initial requirement gathering and architectural design through multi-service implementation, rigorous testing, and modern deployment strategies (e.g., canary, blue-green). Use this skill when coordinating complex, cross-functional feature delivery across frontend, backend, and data teams, ensuring quality and consistency at every phase.

Blueprint for designing GitHub Actions-powered CI/CD pipelines that leverage Docker multi-stage builds, Helm chart environments, ArgoCD GitOps, Kubernetes manifests, and monitoring best practices to keep deployments reliable across teams.

Provides SRE guidance for defining SLIs/SLOs, managing error budgets, automating toil, and configuring monitoring/alerting so teams can scale reliable services and respond to incidents effectively.

Functions as a Chief Security Architect assistant that performs STRIDE/PASTA threat modeling, OWASP checks, Red/Blue team simulations and incident response playbooks to harden any project before production.

This skill provides a structured method for analyzing Windows Security Event Logs (EVTX) to detect brute force attacks targeting RDP endpoints. It involves parsing failed logon events (Event ID 4625) and correlating them with successful logons (Event ID 4624), while also analyzing source IP frequency and NLA bypass attempts. Ideal for security incident investigation, blue-team threat hunting, and building SIEM detection rules.

Blueprint turns a single objective into an executable, multi-step construction plan tailored for coding agents and multi-session teams, complete with context briefs, review gates, dependency awareness, and installable via `/blueprint <project> <objective>`.

This utility executes atomic Red Team tests mapped to the MITRE ATT&CK framework. It is essential for purple team exercises, allowing security teams to assess detection coverage gaps, validate SIEM/EDR rules, and generate detailed ATT&CK coverage heatmaps. Use it to build continuous detection validation loops and measure blue team visibility against known adversary techniques.

A comprehensive tool that analyzes existing codebases to generate detailed, definitive architectural blueprints. It automatically detects technology stacks, identifies architectural patterns (e.g., Microservices, Clean Architecture), and documents implementation details, including dependency flow, cross-cutting concerns (security, logging), and data models. This ensures architectural consistency, aids in onboarding new team members, and guides future development efforts.

This comprehensive guide presents three validated architectural blueprints for integrating Adobe services (Firefly, PDF, etc.). It helps developers decide between simple direct SDK integration (suitable for MVPs), native Adobe App Builder (serverless functions), or robust, high-throughput dedicated microservices, based on team size, complexity, and required scalability.

This guide details setting up advanced Command and Control (C2) redirectors, acting as protective intermediaries between implant beacons and the hidden team server. It covers using Nginx and Apache for request filtering based on Malleable C2 profiles, layering Let's Encrypt TLS, and implementing advanced OPSEC controls like domain fronting, geo/UA filtering, and decoy diversion. Essential for red-teaming operations requiring high resilience against blue-team detection and takedown.

This skill performs comprehensive security audits, including hardening, threat modeling (STRIDE/PASTA), Red/Blue Team exercises, OWASP checks, code review, and incident response. It is designed for infrastructure security across any project. Users should ensure authorization before execution and treat findings as advisory triage rather than proof of exploitability.