Skill UI

OWASP Threat Dragon is an open-source tool designed for security professionals and developers. It guides users through creating detailed data flow diagrams (DFD) to map system architecture. The framework enables the systematic identification of vulnerabilities by applying established methodologies like STRIDE and LINDDUN, culminating in comprehensive, compliance-ready threat model reports.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

This framework provides a rigorous, multi-dimensional guide for conducting code reviews. It evaluates five critical axes: correctness, readability, architecture, security, and performance. Use this process before merging any code change, especially when reviewing PRs, refactoring, or evaluating code produced by AI agents, to ensure continuous improvement and maintain high code health.

A comprehensive code review tool designed for C#/.NET projects. It evaluates the implementation of key design patterns (Command, Factory, Repository) and adherence to SOLID principles. The review covers architecture, best practices (async/await, logging), security, testability, and clean code principles, providing actionable recommendations for improvement.

This comprehensive guide outlines essential best practices and structural checks for developing robust Salesforce Apex code. It covers critical areas such as preventing governor limit exceptions (e.g., bulk safety), enforcing security (CRUD/FLS), preventing SOQL injection, adhering to sharing models, and implementing modern Apex idioms. It also mandates rigorous testing strategies (Positive, Negative, Bulk) and proper trigger architecture.

A comprehensive tool that analyzes existing codebases to generate detailed, definitive architectural blueprints. It automatically detects technology stacks, identifies architectural patterns (e.g., Microservices, Clean Architecture), and documents implementation details, including dependency flow, cross-cutting concerns (security, logging), and data models. This ensures architectural consistency, aids in onboarding new team members, and guides future development efforts.

This guide details how to implement robust Role-Based Access Control (RBAC) for Flexport API integrations. It addresses enterprise needs by allocating scoped API keys and managing permissions at an application layer. Users can define specific roles (Viewer, Operator, Finance, Admin) with granular permissions, ensuring that different user roles can only access necessary endpoints, thereby enhancing security and supporting multi-tenant architectures.

This comprehensive checklist provides a deep dive into Endpoint Detection and Response (EDR) architecture and monitoring mechanisms. It details advanced evasion techniques, such as direct syscalls, AMSI bypass, kernel patching, and memory manipulation. This skill is essential for red team engagements, penetration testing, and advanced malware research to thoroughly assess and bypass modern security defenses.

This skill provides a comprehensive Python guide to building a production-ready Virtual Cloud Network (VCN) on Oracle Cloud Infrastructure (OCI). It details the entire process from scratch, including creating the VCN, setting up Internet and NAT Gateways, configuring route tables, and defining Network Security Groups (NSGs). This is essential for engineers needing to provision complex, secure, and highly functional network architectures for development or production use.

A structured methodology for validating non-trivial decisions by subjecting them to an adversarial, fresh-context review. This process is crucial when correctness is paramount—such as in production, security-sensitive logic, or complex architecture—by forcing a skeptical examination that aims to disprove assumptions rather than simply approve them.

This tool simulates a Chief Technology Officer's comprehensive review, stress-testing any major technical plan. It systematically interrogates critical areas including scaling limits (scaling cliffs), accumulated technical debt, team capacity planning, build-vs-buy economics, system reliability (SLOs), and security compliance. Use it before committing to core architecture changes or making high-stakes engineering decisions.