Skill UI

This comprehensive guide outlines a rigorous, human-in-the-loop engineering workflow for leveraging advanced AI agents to complete complex implementation tasks. It mandates defining clear completion criteria, decomposing work into manageable units, and strategically routing models (Haiku, Sonnet, Opus) based on task complexity. The workflow emphasizes continuous evaluation, regression testing, security review of invariants and edge cases, and strict cost discipline to ensure robust and reliable software development using AI assistance.

Outlines principles and practices for building secure contracts, covering threat modeling, vulnerability mitigation, and deployment readiness to help teams reduce risk when launching automated agreements.

This skill provides a comprehensive framework for the continuous self-improvement of makepad-skills. It outlines automatic skill triggering via hooks, context-aware skill routing, and a structured process for capturing new patterns, error solutions, and best practices. It ensures the entire skill library remains robust and up-to-date throughout the development lifecycle.

This guide outlines a systematic process for transforming any recurring technical pattern, complex debugging solution, or workflow into a standalone, portable skill. It details the multi-step extraction workflow, including pattern identification, structured documentation generation (SKILL.md), and quality control checks to ensure the skill can be reused across different projects.

This guide outlines best practices for creating high-quality, structured pull requests (PRs) using Git and GitHub CLI. It ensures that every PR description captures not only what changed, but also the 'why' and necessary context for reviewers, significantly improving the code review process and adherence to engineering standards.

This skill outlines a comprehensive methodology for designing, building, and deploying robust LLM-powered applications. It covers assessing task-model fit, designing modular pipelines (acquire -> prepare -> process -> parse -> render), and managing state using file systems to ensure scalability and reliability in AI systems.

A comprehensive guide for building modern, accessible, and scalable user interfaces using the shadcn/ui component library. This document outlines core principles, best practices for component composition, styling rules (including Tailwind CSS usage), and structured approaches for forms and layouts. Essential for developers building complex design systems and ensuring code consistency.

This skill outlines the comprehensive process of memory forensics on compromised Linux systems. It guides users through acquiring volatile memory using the LiME kernel module and analyzing the resulting image with the Volatility 3 framework. Key artifacts extracted include process lists, network connections, bash history, and loaded kernel modules, making it an essential technique for incident response, threat hunting, and security investigations.

This skill outlines a comprehensive, structured workflow for managing Microsoft Patch Tuesday security updates. It covers the entire lifecycle, from initial vulnerability triage and risk assessment to testing, staged deployment (Pilot, Production Rings), and final validation, ensuring compliance with risk-based remediation SLAs.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

This guide provides a comprehensive methodology and technical approach for detecting malicious email forwarding rules. It is crucial for threat hunting, incident response, and proactive security assessments to identify persistent access mechanisms used by adversaries for intelligence collection and Business Email Compromise (BEC) attacks. It outlines necessary prerequisites, workflow steps, and key threat indicators (T1114).

This comprehensive guide outlines techniques for authorized penetration testing of real-time web applications using WebSocket connections. It covers discovering various WebSocket endpoints, testing for authentication bypass, identifying Cross-Site WebSocket Hijacking (CSWSH) vulnerabilities, and assessing message handling for injection flaws (SQLi, XSS). Essential for securing chat, trading, and live notification platforms.