Skill UI

Cartography is a CNCF project designed to perform comprehensive cloud asset inventory across AWS, GCP, and Azure. It queries cloud APIs to aggregate infrastructure resources, map complex relationships (like IAM permissions and network paths), and store them in a Neo4j graph database. This allows security teams to visualize potential attack paths, conduct deep security audits, and identify cross-cloud misconfigurations.

This tool performs comprehensive security testing on GraphQL APIs by generating deeply nested, recursive, or highly repetitive queries. It specifically aims to identify Denial-of-Service (DoS) vulnerabilities and resource exhaustion issues by overwhelming the server's CPU, memory, or database connections. Essential for security auditors and penetration testers.

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

Grype is an open-source vulnerability scanner from Anchore. It inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated SBOMs to match packages against multiple vulnerability databases (NVD, GitHub Advisories). Use it for security assessments, auditing, and integrating into CI/CD pipelines to enforce vulnerability standards and manage supply chain risks.

A powerful operational companion for database developers. This skill assists with the daily lifecycle of database interactions, including translating natural language requirements into optimized SQL queries, generating database migrations, performing comprehensive schema introspection across multiple dialects (PostgreSQL, MySQL, SQLite, SQL Server), and identifying performance bottlenecks through detailed query optimization and index recommendations. It also supports ORM patterns like Prisma and SQLAlchemy.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

This tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates components against the NVD CVE database to identify known supply chain vulnerabilities. Key features include building dependency graphs, calculating transitive risk scores, and generating compliance reports for regulatory assessment.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This comprehensive guide details how to correctly implement and manage Firebase Realtime Database within Flutter applications. It covers critical best practices including data modeling (using flattened JSON trees), utilizing real-time listeners, ensuring offline persistence, performing atomic transactions, and implementing security rules. Ideal for applications requiring extremely low-latency synchronization and constant state monitoring.

Provides comprehensive guidelines on using Go's `context.Context` for managing request lifecycles. Learn how to correctly propagate cancellation signals, enforce deadlines, handle timeouts, and safely pass request-scoped values across API boundaries (HTTP handlers, services, databases). Essential reading for writing resilient and robust concurrent Go applications.

A comprehensive guide detailing best practices for database interaction in Go. It covers secure query writing using parameterized placeholders, handling transactions, managing connection pooling, dealing with NULLable columns, and choosing between libraries like sqlx and pgx, while strongly advising against using ORMs.

This advanced prompt acts as a structured guide for generating comprehensive, enterprise-grade technical implementation plans. It forces the detailed breakdown of a feature based on a PRD, covering system architecture (Mermaid diagrams), database schema design, API specifications, frontend component hierarchy, and deployment strategies, all while adhering to a monorepo structure. Ideal for large-scale SaaS development.