Skill UI

Guide to configure and run Nessus scans across servers, workstations, and network devices, covering policy creation, credentialed and unauthenticated checks, REST automation, and result analysis for continual vulnerability management.

Hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT networks by covering Purdue-tier segmentation, secure interfaces, DMZ data replication, injection prevention, and integrity checks for safety, compliance, and optimization scenarios.

Harden serverless compute on AWS Lambda, Azure Functions, and Google Cloud Functions by enforcing least-privilege IAM roles, moving secrets into vaults, scanning dependencies, validating inputs, securing function URLs, and monitoring runtimes so injections, credential theft, and supply-chain threats are caught before deployment.

This skill provides a methodology and code framework to test APIs for Mass Assignment (Over-posting) vulnerabilities. It simulates malicious client requests by identifying writable endpoints and injecting unauthorized or privileged fields (e.g., role, isAdmin, balance) into the request body. The goal is to detect if the server blindly binds all client-supplied parameters to the data model without proper allowlisting or validation, potentially allowing unauthorized privilege escalation or data modification. This is crucial for adherence to OWASP API security standards.

tRPC allows developers to build highly type-safe APIs in a full-stack environment without needing to write or maintain separate schemas. It provides end-to-end type safety from server routers to client components, supporting queries, mutations, subscriptions, and robust middleware. Ideal for building modern TypeScript monorepos, Next.js, or Remix applications.

Provides Nuxt 4 guidelines for hydration safety, routing rules, lazy-loading, and SSR-safe data fetching with useFetch/useAsyncData, helping teams tune performance and handle client/server differences.

SvelteKit is the official full-stack framework built on Svelte, enabling developers to build fast, modern, and highly performant web applications. It provides comprehensive features including file-based routing, Server-Side Rendering (SSR), Static Site Generation (SSG), API routes, and progressive form actions, all while maintaining Svelte's zero runtime overhead. Use this skill when building complex, data-driven web platforms where performance and developer experience are paramount.

Provides CLI-driven access control for a Discord channel by reading/writing the shared JSON state. Use it to approve pairings, edit allowlists, set DM/group policies, and keep the channel server informed without touching Discord directly.

This guide details how to build an MCP app, which is an MCP server enhanced to serve interactive UI resources. It allows developers to render complex widgets—such as forms, pickers, dashboards, and confirmation dialogs—directly inline within a chat conversation. Learn about the architecture, host specifics, and when to use a widget versus standard text output.

This guide assists developers in designing and architecting Model Context Protocol (MCP) servers that integrate deeply with LLMs like Claude. It is not a coding skill, but a comprehensive consultation process that guides users through use case interrogation, determines the optimal deployment model (e.g., Remote HTTP, MCPB), and selects the appropriate tool-design pattern for seamless, robust integration.

MCPB is a specialized local server bundle that packages the entire runtime environment (Node.js or Python) alongside the server code. It allows developers to distribute and run complex MCP services directly on a user's machine without requiring the user to pre-install specific runtimes or toolchains. Use this when the server must interact with the local filesystem, desktop applications, or OS-level APIs.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.