Skill UI

Offers testing guidance covering TDD workflows, unit/integration/E2E organization, framework support, mocking strategy, and coverage to help teams deliver reliable, well-structured test suites.

Guide for assessing AWS, Azure, and GCP environments with tools such as Pacu, ScoutSuite, and Prowler to uncover IAM weaknesses, exposed storage, insecure serverless functions, and cloud-native attack chains.

A comprehensive guide covering methodologies for conducting authorized penetration testing across major cloud platforms, including AWS, Azure, and GCP. It details the shared responsibility model, techniques for exploiting IAM misconfigurations, testing for SSRF vulnerabilities to cloud metadata services, and utilizing industry tools like Pacu and ScoutSuite. Findings are mapped to the MITRE ATT&CK Cloud matrix for robust reporting.

TLS 1.3 is the latest Transport Layer Security protocol, offering significant security and performance improvements over TLS 1.2. This guide details how to configure and validate TLS 1.3 on various environments, including Nginx, Apache, and Python applications. It covers advanced topics such as Perfect Forward Secrecy (PFS), HSTS implementation, modern cipher suites, and best practices for securing modern web services.

A comprehensive guide for implementing Cloud Security Posture Management (CSPM) across multi-cloud environments (AWS, Azure, GCP). Learn how to use specialized tools like Prowler and ScoutSuite, combined with native cloud services (Security Hub, Defender, SCC), to continuously monitor for misconfigurations, compliance violations (CIS, SOC 2), and security drifts, thereby enforcing security guardrails in complex cloud architectures.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

This skill provides a comprehensive guide on securely integrating and calling Firebase Cloud Functions from Flutter applications. It covers the proper use of `httpsCallable` to invoke structured server-side logic, handling data serialization, implementing robust error handling (including permission denial and timeouts), configuring regional deployments, and utilizing the Firebase Emulator Suite for reliable local testing.

A comprehensive guide to stretchr/testify for Go development. It covers best practices for writing readable unit tests, including the crucial distinction between `assert` and `require`. Learn advanced assertions (like `JSONEq` and `Eventually`), how to use `testify/mock` to isolate components, and structuring complex tests using `testify/suite`. Essential for professional Go projects.

Test-driven development requires writing a failing test before any implementation so logic, bug fixes, and behavioral changes are always backed by proof; it is ideal for guarding refactors and ensuring regressions stay caught by the automated suite.

Comprehensive Go testing guidance that spans table-driven subtests, testify suites, mocking, unit/integration tests, benchmarks, coverage, fuzzing, goleak leak detection, snapshot checks, and GitHub Actions CI to keep production suites reliable.

This skill automates the comprehensive localization and translation of an entire MkDocs documentation suite. It translates all Markdown files from source English folders into a specified target language, preserving the exact folder structure and Markdown formatting. Additionally, it updates include references and modifies the core mkdocs.yml configuration file to properly support the new locale, ensuring a seamless multilingual documentation setup.