Skill UI

A comprehensive guide to structuring robust Flutter applications using industry-standard layered architecture (UI, Domain, Data). It details patterns like MVVM, Repository pattern, and Use Cases, ensuring clean separation of concerns, manageable state flow (unidirectional data flow), and testability. Ideal for scaffolding new, large-scale projects or refactoring legacy codebases.

A comprehensive skill for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. It automates critical quality gates including unit testing (with race detection), linting, SAST (security static analysis), vulnerability scanning, code coverage enforcement, dependency management (Dependabot/Renovate), and automated binary releases (GoReleaser). Ideal for improving existing Go workflows or setting up CI from scratch.

Comprehensive guide for managing Go project dependencies, covering best practices for adding, upgrading, and removing packages. It emphasizes critical security practices like vulnerability scanning (govulncheck), supply chain verification (go mod verify), and maintaining clean module files (go mod tidy). Use this when auditing security, refactoring dependencies, or ensuring build reproducibility.

A comprehensive guide to creating production-ready, idiomatic Go applications. Covers critical patterns such as functional options, robust error handling, graceful shutdown, resource management, and architectural best practices. Ideal for refactoring existing Go code, choosing between architectural patterns, or designing scalable APIs and constructors.

A comprehensive guide to implementing robust, idiomatic error handling in Go. It covers best practices for error creation, context wrapping using `%w`, type-safe inspection with `errors.Is`/`errors.As`, adhering to the single handling rule, and utilizing structured logging with `slog`. Essential for building scalable, debuggable, and production-ready Go applications.

This skill acts as a Go modernization engineer, keeping codebases current with the latest Go idioms and standard library improvements. It proactively detects deprecated APIs, outdated patterns, and suggests adopting modern features (like `errors.Is`, `slog`, etc.). It supports both inline, contextual suggestions during active coding, and full-scan review for CI/CD pipelines, ensuring code safety, correctness, and readability.

A comprehensive skill set for senior Go security engineers, providing structured methodologies for identifying and mitigating vulnerabilities. It teaches defense-in-depth principles, utilizes Threat Modeling (STRIDE), and scores risks using DREAD. Modes include detailed Review (PR security checks), full Audit (parallel vulnerability scanning), and Coding (secure implementation). Essential for auditing, reviewing, or developing any Go application that handles sensitive data.

Guides agents through researching Microsoft technologies via Learn MCP docs, then scaffolds hybrid skills that store essential knowledge locally while enabling dynamic lookups for depth.

This skill provides a comprehensive guide on utilizing the `provider` package for state management and dependency injection in Flutter. It covers different provider types (e.g., `ChangeNotifierProvider`, `FutureProvider`, `StreamProvider`), best practices for setup using `MultiProvider`, and efficient ways to consume state using `context.watch`, `context.select`, and `Consumer` widgets. It is essential for building scalable and maintainable Flutter applications.

Provides step-by-step techniques for assessing AWS security, covering IAM enumeration, privilege escalation, SSRF metadata attacks, S3/Lambda exploitation, and red-team persistence workflows with recommended tools and commands.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

Walks through systematic Linux privilege escalation, covering enumeration, automation with linpeas/linenum, kernel exploit hunting, sudo/SUID abuse, and exploitation of cron, LD_PRELOAD, and GTFOBins for gaining root access.