Skill UI

Guides building secure production-grade Electron desktop apps with isolated renderer processes, hardened IPC via preload bridges, packaging through electron-builder, code signing, and full auto-update workflows.

A forensic tool for performing post-mortem analysis on AI-assisted coding sessions. It goes beyond simply stating what was done, determining *why* work deviated (e.g., spec ambiguity, repo friction, agent error), identifying scope creep, and classifying rework patterns. It provides evidence-backed recommendations to improve prompts, codebase health, and future development workflows.

Opinionated Docker development assistant that analyzes Dockerfiles, docker-compose setups, multi-stage builds, and container security to shrink images, speed builds, and enforce production-ready practices when users need optimized containers.

Defines a regression-testing workflow for AI-assisted development that forces sandbox API routes, isolates tests from databases, and validates sandbox/production parity so recurring AI-introduced bugs are caught before release.

Investigate trojanized updates, compromised build artifacts, and sideloaded dependencies to identify intrusion vectors, compare binaries, document code signing anomalies, and extract IOCs for detection rule development.

Guides red teams through OSINT-driven spearphishing simulation campaigns, covering pretext development, payload crafting, email infrastructure setup, execution, and post-campaign analysis for authorized assessments.

Guide for configuring Hardware Security Modules with the PKCS#11 interface to generate, manage, and operate on keys securely, covering SoftHSM2 development setups and cloud HSM integrations for compliance and hardened deployments.

Implements MITRE ATT&CK coverage mapping by exporting SIEM detection rules, building coverage matrices, scoring techniques, and surfacing gaps so SOC teams can prioritize rule development and track detection maturity.

This tool provides a structured methodology for triaging raw vulnerability findings generated by DAST and SAST scanners. It utilizes the OWASP risk rating methodology to validate true positives, filter out false positives, and calculate a comprehensive risk score (Risk = Likelihood x Impact). This process significantly reduces alert fatigue and ensures development teams prioritize remediation efforts on the most critical and exploitable vulnerabilities.

Develop precise YARA detection rules by extracting unique strings, imports, and byte patterns from PE samples, organizing meta/strings/condition sections, and tuning logic to minimize false positives during threat hunting and incident response.

This comprehensive guide covers the principles and implementation steps for building Progressive Web Apps (PWAs). Learn to integrate essential components like Web App Manifests and Service Workers to ensure your web application offers a reliable, fast, and truly offline-capable experience, mimicking the feel of a native mobile app. Ideal for enhancing web resilience and installability.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.