Skill UI

Implements RSA key pair lifecycle tasks—generation, serialization (PEM/DER/PKCS#8), passphrase encryption, rotation, fingerprinting, and RSA-PSS signing—so cryptographic teams can enforce NIST SP 800-57 controls and secure deployments.

Guide for integrating Hardware Security Modules via PKCS#11—covering slot/token discovery, key creation, signing, verification, and compliance reporting with python-pkcs11, AWS CloudHSM, and YubiHSM2 in security assessments or audits.

Guides teams through designing, implementing, and evidencing SOC 2 Type II controls aligned with the AICPA Trust Services Criteria, covering scoping, control mapping, evidence collection, remediation, and audit collaboration for a six- to twelve-month examination.

Defines workflows for scanning container registry images via Trivy and Grype, generating SBOMs, signing artifacts with Cosign/Sigstore, and configuring registry policies plus CI/CD gates to block unscanned or unsigned images.

This guide assists developers in designing and architecting Model Context Protocol (MCP) servers that integrate deeply with LLMs like Claude. It is not a coding skill, but a comprehensive consultation process that guides users through use case interrogation, determines the optimal deployment model (e.g., Remote HTTP, MCPB), and selects the appropriate tool-design pattern for seamless, robust integration.

A comprehensive toolset to scaffold, build, sign, and package SwiftPM-based macOS applications entirely without requiring an Xcode project. It guides users through the end-to-end process, including setting up the project, running the app, performing code signing, notarization, and generating update appcasts for robust, reproducible releases.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

Detect NTLM relay attacks by correlating Windows Security Event 4624 LogonType 3 entries against IP-to-hostname inventories, auditing SMB/LDAP signing enforcement, spotting Responder/LLMNR poisoning traffic, and tagging NTLM downgrade attempts for SIEM alerting.

Implements Cosign keyless signing with Fulcio certificates, Rekor log audit, and OIDC identity binding so container images and artifacts gain verifiable provenance within CI/CD pipelines.

This comprehensive guide covers idiomatic C# and modern .NET best practices for building robust, high-performance, and maintainable applications. Topics include immutability, dependency injection, explicit coding, proper async/await usage, the Options pattern, and the Result pattern. Essential reading for developers designing services with ASP.NET Core.

Guides designing stable, well-documented interfaces for APIs, module boundaries, and component props to make correct usage easy and inadvertent mistakes difficult.