Skill UI

Polars is a blazing fast in-memory DataFrame library based on Apache Arrow that replaces pandas for 1-100GB workloads, offering expression-based lazy execution, parallel operators, and rich I/O for ETL pipelines.

PyOpenMS provides Python bindings for OpenMS to drive complete mass spectrometry workflows, covering data IO, spectral processing, feature/peptide-protein identification, quantitation, and metabolomics pipelines.

This guide provides a comprehensive walkthrough for developing and deploying Apify Actors. Actors are serverless, containerized applications designed for powerful tasks like web scraping, data processing, and complex automation. Learn the mandatory setup, template selection (Python, JS, TS), step-by-step development workflow, and crucial security best practices for building robust, production-ready data pipelines.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

This guide demonstrates how to implement clean and robust asynchronous pipelines in TypeScript using `TaskEither` from `fp-ts`. It solves the common problem of deeply nested, unmanageable `try/catch` blocks, allowing developers to compose sequential API calls and operations while correctly handling success and failure paths in a functional, immutable manner. Ideal for complex data fetching and workflow orchestration.

This guide provides a quick reference for 'pipe' and 'flow' utilities in fp-ts. The `pipe` function is used to chain multiple operations to transform a specific value, while `flow` allows you to create reusable, composed functions (pipelines). It is essential for implementing clean, declarative data manipulation and functional composition in TypeScript.

A comprehensive suite of 25 advanced agent skills and plugins designed for complex architecture, full-stack development, and platform operations. It covers the entire software development lifecycle (SDLC), including agent design, RAG implementation, CI/CD pipelines, database schema management, observability setup, security auditing, and release management. Ideal for advanced developers working with AI coding assistants and CLI tools.

This skill provides methods for reliably extracting typed, validated, and structured data from Large Language Models (LLMs), moving beyond simple text parsing. It covers best practices across major APIs (OpenAI's response_format, Anthropic's tool_use, Google's responseSchema) and local models. Key workflows include defining schemas (Pydantic/Zod), implementing constrained decoding, and building robust retry loops for production-grade data pipelines.

MISP (Malware Information Sharing Platform) is an open-source platform designed for gathering, storing, and correlating Indicators of Compromise (IOCs). This skill guides users through deploying MISP using Docker, configuring various threat feeds (MISP, TAXII, CSV), and utilizing the PyMISP Python API. It enables the building of automated pipelines to aggregate diverse threat data, such as IP addresses, domains, and hashes, for enhanced security operations.

In-toto is a CNCF standard project used to verify the integrity of software supply chains. It generates cryptographically signed attestations (link metadata) at every stage of the CI/CD pipeline, proving exactly what artifacts were produced and who authorized the process. This is crucial for securing container builds and ensuring compliance against tampering.

Build a PyMISP-driven threat intelligence platform that ingests multiple IOC feeds, tags MITRE ATT&CK techniques, enriches data via VirusTotal and AbuseIPDB, and exports STIX 2.1 bundles for SIEM pipelines.

Grype is an open-source vulnerability scanner from Anchore. It inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated SBOMs to match packages against multiple vulnerability databases (NVD, GitHub Advisories). Use it for security assessments, auditing, and integrating into CI/CD pipelines to enforce vulnerability standards and manage supply chain risks.