Skill UI

A specialized skill designed to ensure robust software quality by covering the entire testing lifecycle. This includes defining test strategies, writing unit, integration, and E2E tests, and implementing advanced testing types like performance (k6), security (OWASP), and functional testing. It guides users through coverage analysis, debugging flaky tests, and generating detailed defect and quality reports.

This skill simulates an expert software engineer and systems analyst. It is designed for deep, evidence-based understanding of complex codebases. Users can ask "how does X work" or request architectural reviews, ensuring every claim is grounded in actual code paths, data flows, and dependency chains, following a rigorous multi-iteration process.

This skill provides a comprehensive workflow for analyzing malicious software to extract actionable Indicators of Compromise (IOCs). It covers static analysis (PE parsing, hashing, string extraction) and dynamic analysis techniques. Users learn how to identify file hashes, network indicators (C2 IPs, domains), registry modifications, and behavioral artifacts, ultimately formatting the findings into standard STIX 2.1 formats for sharing and incident response.

This script systematically investigates all persistence mechanisms on Windows and Linux systems. It analyzes critical areas like the Windows Registry (SYSTEM, SOFTWARE, HKCU), scheduled tasks, and common run keys to identify how malware maintains access and survives system reboots. It is essential for advanced incident response, threat hunting, and digital forensics investigations.

This skill details implementing Software Composition Analysis (SCA) using Snyk. It helps security teams detect known vulnerabilities, check license compliance, and automate dependency remediation within CI/CD pipelines. Learn to integrate scanning into GitHub, GitLab, and Jenkins workflows, generate automated fix PRs, and continuously monitor deployed applications to safeguard the software supply chain.

This powerful tool parses Software Bill of Materials (SBOM) in CycloneDX and SPDX formats. It correlates identified components against the NVD CVE database via API, building dependency graphs and calculating risk scores. It is essential for assessing third-party risk, identifying transitive vulnerability paths, and generating comprehensive compliance reports for supply chain security.

This skill teaches users to apply the scientific method to software debugging. Instead of random changes, it guides the process through five steps: Observation, Hypothesizing, Prediction, Testing, and Analysis. By systematically forming and testing specific, measurable hypotheses, users can efficiently isolate failing components and confirm the true root cause of technical issues.

A comprehensive guide to creating production-grade Product Requirements Documents (PRDs). This skill helps bridge the gap between vague business concepts and concrete technical specifications for modern software systems and AI features. It enforces a structured workflow, ensuring all necessary components—from user stories and success KPIs to technical architecture and risk analysis—are defined.

Performs a systematic and structured investigation to determine the true source of bugs, errors, and unexpected system behavior, rather than merely treating symptoms. This method utilizes techniques like the Five Whys, hypothesis-driven testing, stack trace analysis, and gathering evidence (logs, git diffs) across multiple phases. It is ideal for complex, intermittent, or deeply rooted technical issues in software development.

This skill provides a structured approach to debugging software issues by prioritizing root cause analysis over quick fixes. It guides users through four phases: investigation, pattern analysis, hypothesis verification, and implementation. Essential for resolving test failures, production bugs, and performance issues efficiently, preventing recurring problems and architectural debt.

This assistant serves as a hands-on implementation partner, guiding users to build functional tools, scripts, dashboards, and prototypes. It emphasizes rapid iteration, showing working code, and applying proven development patterns such as data-to-deck pipelines, HTML presentations, and structured build practices. Use it when the goal is to transform analysis or concepts into tangible, working software or robust automation.

This comprehensive guide covers the process of creating, analyzing, and securing Software Bills of Materials (SBOMs). It utilizes Syft to generate standards-compliant SBOMs (CycloneDX or SPDX) from container images and filesystems. The workflow details correlating these SBOMs with known CVEs using Grype for vulnerability analysis, and subsequently signing the artifacts with Cosign. This process is crucial for establishing supply chain trust, ensuring dependency visibility, and integrating vulnerability gating into CI/CD pipelines.