Skill UI

This skill teaches the critical principles and decision-making processes for safe production releases. It covers platform selection (e.g., Kubernetes, Vercel), mandatory pre-deployment verification (Code Quality, Environment), structured workflows (Prepare, Backup, Deploy, Verify), and advanced strategies like Blue-Green and Canary deployments. Focuses on thinking through risk mitigation, not just executing scripts.

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

Outlines principles and practices for building secure contracts, covering threat modeling, vulnerability mitigation, and deployment readiness to help teams reduce risk when launching automated agreements.

This skill generates a comprehensive risk register for projects, programs, or products. It applies standard risk management practices, including likelihood/impact scoring, RAG status, and detailed mitigation/contingency plans. Ideal for preparing reports for project boards, steering committees, and programme management offices.

This skill generates a comprehensive, structured threat model for any given service or feature using the STRIDE framework. It guides users through identifying critical assets, defining trust boundaries, enumerating specific threats (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege), assessing risk, and proposing concrete mitigation controls. Ideal for security design reviews and documentation.