Skill UI

This skill provides a comprehensive guide on implementing robust data governance patterns within Delta Lake, leveraging Unity Catalog. It covers essential compliance topics such as data classification tagging, handling GDPR 'right-to-deletion' requests for PII, and establishing automated data retention policies. Use this when designing secure, compliant, and auditable data pipelines in a data lake environment.

This skill provides comprehensive observability for the Databricks platform. It enables users to monitor job run histories, track cluster utilization and associated costs (DBU), detect slow SQL queries, and audit access logs. Use it for setting up robust monitoring dashboards, ensuring pipeline health, and optimizing resource consumption across the entire data stack.

This elite workflow simulates the comprehensive process of a Senior Software Engineer and Product Designer. It enforces a rigorous development pipeline: starting with planning, solid architecture, and TDD implementation, through clean code practices, and technical auditing. Crucially, it includes mandatory, pixel-perfect UX visual validation to ensure the output is flawless, consistent, and production-grade.

This comprehensive reference architecture guides the integration of OpenEvidence into clinical decision support systems (CDS). It is designed for healthcare platforms needing evidence-based query processing, deterministic citation tracking, and full audit logging. Key considerations include HIPAA compliance, optimizing for sub-second response times in point-of-care workflows, and establishing robust data models and event pipelines.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

A specialized skill for conducting comprehensive security audits. It identifies vulnerabilities in code, infrastructure, and dependencies, generating structured reports with severity ratings (CVSS) and detailed remediation guidance. Ideal for SAST scans, penetration testing, DevSecOps pipelines, and compliance checks.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

A rigorous framework designed to audit GitHub Actions workflows for exploitable security vulnerabilities. This skill focuses strictly on real-world attack patterns, requiring every identified finding to include a concrete exploitation scenario (Entry Point, Payload, Impact). Ideal for securing CI/CD pipelines against external attackers.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

A comprehensive suite of 25 advanced agent skills designed for modern software development and platform operations. These tools cover the entire development lifecycle, including multi-agent architecture design, robust CI/CD pipelines, database schema management, performance profiling, observability setup, and security auditing. Ideal for complex system integration and platform engineering teams.

Scans GitHub Actions workflows and CI/CD pipeline files to flag unpinned actions, expressions that may inject scripts, dependency confusion, and exposed secrets while automating audits for analysts hardening build systems.

Use 42Crunch to run static API Audit and dynamic conformance scans on OpenAPI specs, integrating with IDEs and CI/CD pipelines to detect OWASP API Top 10 issues before deployment and maintain runtime compliance.