Skill UI

Guides building Spring Boot apps with layered architecture, REST controllers, JPA repositories, transactional services, global exception handling, DTO mappers, and testing checkpoints.

A comprehensive skill for conducting authorized Bluetooth Low Energy (BLE) security assessments. It covers detecting various attacks, including sniffing, Man-in-the-Middle interception, replay attacks, and GATT enumeration abuse. The workflow guides users through packet capture using specialized sniffers (Ubertooth, nRF Sniffer), analyzing services and characteristics via Python/bleak, and performing cryptographic analysis using tools like crackle.

This comprehensive guide implements External Attack Surface Management (EASM). It integrates leading industry tools like Shodan, Censys, subfinder, httpx, and nuclei for deep reconnaissance. Users can systematically discover assets, enumerate subdomains, fingerprint services, scan for vulnerabilities, and calculate weighted exposure scores based on professional OWASP methodology. Ideal for continuous security monitoring and deep penetration testing.

This guide details the Hexagonal Architecture (Ports and Adapters) pattern, a robust method for decoupling core business logic from external infrastructure concerns. It teaches how to structure applications to make the domain model independent of databases, UI frameworks, or message queues. Implementing this pattern drastically improves testability, maintainability, and the ability to swap out external services without rewriting business rules.

This skill provides a comprehensive, read-only audit of a development workspace, including active repositories, installed plugins, connected services, and environment configurations. It analyzes existing capabilities against best practices to identify functional gaps and recommends the most valuable ECC-native skills, hooks, and workflows needed to enhance the development experience. Ideal for setup planning and architectural reviews.

This comprehensive guide covers idiomatic C# and modern .NET best practices for building robust, high-performance, and maintainable applications. Topics include immutability, dependency injection, explicit coding, proper async/await usage, the Options pattern, and the Result pattern. Essential reading for developers designing services with ASP.NET Core.

This skill guides users on performing advanced, cloud-native threat hunting using AWS Detective. It leverages interactive behavior graphs, entity investigation timelines, and GuardDuty correlations to automatically analyze AWS logs (CloudTrail, VPC Flow Logs, etc.). Users can efficiently investigate suspicious IAM users, detect lateral movement, and correlate complex attack narratives across multiple AWS services.

Provides comprehensive guidelines on using Go's `context.Context` for managing request lifecycles. Learn how to correctly propagate cancellation signals, enforce deadlines, handle timeouts, and safely pass request-scoped values across API boundaries (HTTP handlers, services, databases). Essential reading for writing resilient and robust concurrent Go applications.

This comprehensive guide covers Dependency Injection (DI) patterns specifically for Golang. It explains why DI is crucial for building testable, loosely coupled, and maintainable services. The skill compares manual constructor injection for small projects with advanced DI libraries (like google/wire, uber-go/dig) for complex architectures, focusing on best practices such as interface-based design and managing service lifecycles.

A comprehensive guide for Go engineers on designing, implementing, and reviewing production-ready gRPC microservices. Covers best practices for service definition, error handling (status codes), interceptors, TLS/mTLS, graceful shutdown, and optimizing client connection management for high availability in distributed systems.

A comprehensive skill for engineering high-quality, observable Go services. It guides best practices across five key signals: structured logging (slog), Prometheus metrics, OpenTelemetry tracing, continuous profiling (pprof), and RUM. Use this when instrumenting new features, reviewing PRs, or auditing entire codebases to ensure systems are fully measurable for reliable diagnosis and alerting.

A type-safe dependency injection toolkit for Go, enabling robust and maintainable application architecture. It manages service containers, handling service lifecycles (Lazy, Eager, Transient), scoped services, and dependency resolution. Ideal for refactoring manual constructor injection into a structured DI system in Go projects.