Skill UI

A comprehensive skill for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. It automates critical quality gates including unit testing (with race detection), linting, SAST (security static analysis), vulnerability scanning, code coverage enforcement, dependency management (Dependabot/Renovate), and automated binary releases (GoReleaser). Ideal for improving existing Go workflows or setting up CI from scratch.

This comprehensive guide provides detailed procedural steps for configuring and executing CodeQL code scanning. It covers both implementing automated workflows using GitHub Actions (`codeql.yml`) and running scans via the CodeQL CLI. Users will learn how to manage language matrices, set build modes, interpret SARIF outputs, handle monorepo structures, and troubleshoot complex security analysis setups across multiple languages (e.g., Python, Java, C++).

A structured methodology for coordinating multiple, simultaneous investigation threads to determine the root cause of complex system failures, performance regressions, or integration bugs. This skill decomposes a large problem into independent tracks (e.g., database, application code, infrastructure), assigns ownership, and manages structured sync points (Continue/Pivot/Converge) to converge on a solution faster than serial debugging. Essential for high-stakes production incident response.

A universal assistant for conducting deep code reviews across major SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). It rigorously analyzes SQL code for critical vulnerabilities (like SQL injection), performance bottlenecks, maintainability issues, and adherence to industry best practices. Features include security audits, index optimization recommendations, query structure analysis, and schema design validation, ensuring robust and secure database development.

Conducts STRIDE-A threat modeling on repositories or systems, running either a full single-pass analysis with architectures, DFDs, prioritized findings, and executive assessments, or an incremental update that compares a baseline report to the current code and highlights deltas.

This skill analyzes the implementation gap by comparing approved feature requirements against the existing codebase, architecture, and context. It helps identify missing capabilities, potential integration challenges, and necessary technical research areas. The output provides multiple viable implementation options and a comprehensive analysis report, guiding the transition from requirements definition to technical design.

This skill provides a comprehensive guide to optimizing costs when using AssemblyAI for speech-to-text transcription. It details model selection (Best vs. Nano), guides feature budgeting (e.g., Diarization, Sentiment Analysis), and includes code examples for cost estimation and usage tracking. Use this when managing billing, reducing operational expenses, or implementing budget alerts for high-volume audio processing.

A comprehensive toolkit for debugging complex Adobe API issues that resist standard troubleshooting. Covers advanced techniques such as IMS token introspection, Firefly async job failure analysis, mapping PDF Services error codes, and deep network-layer diagnostics (DNS, TLS). Essential for resolving difficult, production-level integration bugs.

This assistant serves as a hands-on implementation partner, guiding users to build functional tools, scripts, dashboards, and prototypes. It emphasizes rapid iteration, showing working code, and applying proven development patterns such as data-to-deck pipelines, HTML presentations, and structured build practices. Use it when the goal is to transform analysis or concepts into tangible, working software or robust automation.

A comprehensive guide for diagnosing and fixing common HubSpot API errors (e.g., 401, 403, 429, 400). It provides real error response bodies, root cause analysis, and actionable code solutions for debugging failed API requests, improving integration reliability, and managing complex CRM interactions.

This skill runs a comprehensive, sequenced pipeline (Patterns 1-5) to structurally analyze a monolithic codebase. It inventories components, detects domain duplication, resolves hierarchy issues, measures inter-module coupling, and groups components into candidate, domain-aligned services. It is essential for architects planning service extraction, providing actionable metrics and DDD insights before refactoring or splitting the application.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.