Skill UI

Manage and apply custom policies to customize readiness scoring across development artifacts. Users can set pass-rate thresholds, override criteria impact, or disable irrelevant checks to tailor scoring to specific organizational standards or project needs. Essential for CI gating and ensuring compliance.

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

This expert playbook provides a comprehensive guide to lattice-based cryptanalysis techniques. It covers fundamental concepts like SVP and CVP, and deep dives into advanced algorithms such as LLL and BKZ reduction. Key attack applications include Coppersmith's method for finding small roots in RSA, solving the Hidden Number Problem for recovering DSA/ECDSA nonces, and analyzing knapsack ciphers. Essential for CTF and academic cryptanalysis.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

Use this skill to deeply inspect and audit the entire process of local AI coding-agent sessions. It tracks critical operational metrics such as token consumption, cost spikes, tool failures, latency anomalies, and overall health scores. Ideal for debugging unreliable code runs, establishing CI/CD health gates, or comparing different attempts to ensure semantic accuracy.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

This skill provides a comprehensive audit of GitHub Actions workflows. It inspects CI configurations to identify bottlenecks, waste sources, and areas for optimization, helping users reduce runtime, lower costs, and boost overall CI/CD efficiency. It covers caching, concurrency, and trigger reduction.

Master the design, debugging, and hardening of production-grade GitHub Actions CI/CD pipelines. This skill covers advanced topics including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, secrets management, environment protection, and complex trigger patterns (e.g., workflow_call, schedule, release). Use this to automate complex build, test, and deployment processes.

This skill diffs a live web page's accessibility violations against a specified baseline. It can compare changes against uncommitted local stashes or a specific Git branch. The report focuses exclusively on changes, highlighting new violations introduced, violations that have been fixed, and the count of pre-existing issues. Ideal for CI/CD pipelines and development auditing.

Manages the deployment of local applications and websites to the Vercel platform. This skill intelligently detects the project's current state (e.g., if it is already linked or if git is available) and guides the user through the optimal deployment method. It prioritizes establishing a permanent git-push connection to facilitate a seamless Continuous Integration/Continuous Deployment (CI/CD) workflow. Use when the user explicitly requests deployment actions.

The RunAPI CLI serves as the dedicated execution layer for interacting with RunAPI's suite of advanced AI models. It allows developers to programmatically generate multimodal content, including images, videos, and music/audio, directly from the terminal or CI/CD pipeline. Users can submit one-off jobs, manage asynchronous tasks, and pass complex JSON request bodies to various services like Suno, Claude, and Gemini, making it essential for robust AI automation workflows.