Skill UI

Guidance for building infrastructure through the AWS Cloud Development Kit, helping developers define cloud resources in code and automate deployment workflows for CI/CD-friendly stacks.

This skill guides developers in creating, editing, and validating EAS CI/CD workflow YAML files for Expo projects. It provides comprehensive instructions on defining workflow triggers, structuring jobs, managing dependencies, and ensuring deployment automation adheres to the latest Expo schema and best practices.

A rigorous framework designed to audit GitHub Actions workflows for exploitable security vulnerabilities. This skill focuses strictly on real-world attack patterns, requiring every identified finding to include a concrete exploitation scenario (Entry Point, Payload, Impact). Ideal for securing CI/CD pipelines against external attackers.

This skill guides the comprehensive packaging and deployment of applications built with Makepad. It covers building for multiple target platforms, including desktop (Windows, macOS, Linux), mobile (Android, iOS), and WebAssembly. Use this guide when setting up CI/CD pipelines, generating distributable installers (.deb, .dmg, .apk, .ipa), or automating release artifacts using tools like cargo-packager and cargo-makepad.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

A comprehensive guide and template for deploying applications from idea to production. It covers modern DevOps practices, including containerization with Docker, robust CI/CD workflows using GitHub Actions, and infrastructure management with AWS SAM and Terraform. Includes setup for monitoring, health checks, and scalable cloud deployments.

This comprehensive index covers 37 advanced engineering skills designed for complex system architecture, platform operations, and reliability. Skills include agent design, RAG implementation, CI/CD, observability, database modeling, and security auditing, supporting the entire development lifecycle for powerful enterprise applications.

A comprehensive guide to using k6 for robust performance and load testing across APIs, WebSockets, and browser scenarios. Learn to write realistic load simulations (smoke, load, stress, soak), analyze performance metrics, set SLAs, and integrate testing into CI/CD pipelines to ensure system reliability before deployment.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

This comprehensive guide details how to design and implement an end-to-end DevSecOps pipeline leveraging GitLab CI/CD. It integrates crucial automated security checks—such as SAST, DAST, container scanning, dependency scanning, and secret detection—directly into the development workflow. By adopting this approach, teams can effectively 'shift left' security, identifying and mitigating vulnerabilities early in the development lifecycle to ensure compliance and robust application security.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.