Skill UI

This skill outlines a comprehensive, structured workflow for managing Microsoft Patch Tuesday security updates. It covers the entire lifecycle, from initial vulnerability triage and risk assessment to testing, staged deployment (Pilot, Production Rings), and final validation, ensuring compliance with risk-based remediation SLAs.

This guide provides a comprehensive walkthrough for deploying and configuring a production-grade Command and Control (C2) infrastructure using the open-source Havoc framework. It covers setting up the Teamserver, configuring secure HTTPS listeners, implementing redirectors (e.g., Nginx), and deploying Demon agents for advanced post-exploitation red team operations. This skill is essential for authorized security assessments and building robust defensive countermeasures.

A comprehensive guide detailing best practices for hardening Docker containers, aligning with CIS Docker Benchmark v1.8.0. It covers host configuration, minimizing attack surface, implementing least privilege, and enhancing runtime security using techniques like read-only filesystems, Seccomp, and AppArmor. Use this when deploying secure, production-grade containerized applications.

This skill guides the implementation of automated security scanning for Infrastructure as Code (IaC) templates using industry-leading tools like Checkov and tfsec. It focuses on integrating security checks into CI/CD pipelines to detect misconfigurations (e.g., public buckets, open ports) in Terraform, CloudFormation, and Kubernetes manifests before they reach production, thereby enforcing policy-based governance and securing the development lifecycle.

This skill guides developers through integrating Static Application Security Testing (SAST) tools like CodeQL and Semgrep into GitHub Actions CI/CD pipelines. It covers automating code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results, and establishing quality gates to prevent vulnerable code from merging into production.

A comprehensive guide to building production-grade Laravel applications. It details architectural patterns for achieving scalability and maintainability, covering service/action separation, advanced Eloquent usage (casts, scopes), dependency injection via service containers, and robust API routing patterns.

This comprehensive guide details industry best practices for container image hardening. It covers minimizing attack surface through multi-stage builds, utilizing distroless images, enforcing non-root users, and configuring read-only root filesystems. The techniques ensure compliance with standards like the CIS Docker Benchmark, making images secure and production-ready.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.

A lightweight CLI tool for systematically comparing various coding AI agents (such as Claude Code, Aider, and Codex) head-to-head. It measures crucial metrics—pass rate, API cost, execution time, and consistency—on reproducible tasks defined via YAML manifests. Use this to objectively select the best agent for your codebase or to validate model updates before production deployment.

A comprehensive 7-stage workflow designed to manage, audit, and optimize GitHub repositories. This tool automates critical tasks including identifying hardcoded secrets, cleaning up junk files, performing deep documentation reviews, benchmarking against competitors, and validating the final state, transforming messy codebases into production-ready assets.

Provides Playwright-driven browser automation for scraping structured data, driving multi-step workflows, managing sessions and anti-detection tactics, and capturing screenshots/PDFs in production pipelines.

This guide outlines the architecture and implementation steps for building a robust, production-ready design system. It covers core elements like design tokens, reusable components, and layout patterns. Ideal for teams needing to maintain design consistency, ensure accessibility, and synchronize design (Figma) with implementation (Storybook).