Skill UI

This tool facilitates comprehensive purple team exercises by executing Atomic Red Team tests mapped to MITRE ATT&CK techniques. It is primarily used for gap analysis, validating detection coverage (blue team visibility) against specific threat vectors, and building continuous, automated adversarial emulation pipelines in CI/CD environments.

This powerful tool utilizes Playwright to record high-quality, professional web application demo videos. It simulates natural user interactions, injecting a visible cursor overlay and adhering to specific pacing guidelines. It is ideal for creating comprehensive tutorials, feature walk-throughs, or documentation for stakeholders.

Feishu plugin troubleshooting tool combining FAQ guidance with the /feishu doctor command to inspect permissions, API connectivity, app credentials, and user authorizations, then generate diagnostic reports and remediation steps.

This tool runs comprehensive diagnostics on the current context mode environment. It checks the status of critical components, including runtimes, hooks, FTS5, plugin registrations, and versions for npm and the marketplace. Use this skill to quickly identify potential technical issues or configuration inconsistencies, ensuring smooth system operation.

Generates structured CodeTour `.tour` files in JSON format for detailed, step-by-step code walkthroughs. This tool is essential for onboarding new engineers, conducting architectural reviews, or documenting complex PR changes. It provides a guided narrative that directs users to specific files and line anchors, ensuring a structured and focused learning journey.

This tool guides the creation of actionable monitoring dashboards for observability platforms like Grafana and SigNoz. Instead of merely displaying raw metrics, it focuses on structuring data to answer critical operational questions: Is the system healthy? Where are the bottlenecks? What changes occurred? And what action should be taken? It transforms raw metrics into decision-making tools.

This guide provides detailed best practices for writing and maintaining comprehensive End-to-End (E2E) test cases for the 'lark-cli' tool. It covers the entire workflow, from exploring live help documentation and identifying leaf commands, to structuring state-proving tests (e.g., read-after-write assertions) and generating the required `coverage.md` artifact. Use this when adding or significantly updating E2E coverage for any specific functional domain.

Guides engineering teams through planning and executing deprecation, migration, and removal of legacy systems, ensuring replacements, tooling, and communication keep users safe.

This skill guides the comprehensive workflow for performance measurement in Go. It covers writing robust benchmarks using b.Loop(), running tests with advanced flags (CPU/memory profiles), and deep analysis using tools like benchstat and pprof. Use this when you need to precisely measure bottlenecks, statistically compare multiple optimization variants, or detect performance regressions in CI/CD pipelines.

This skill provides comprehensive observability tooling for Go services, covering the five essential signals: structured logging (slog), Prometheus metrics, OpenTelemetry tracing, continuous profiling, and RUM. Use it for proactive production monitoring, correlating logs with traces, setting up SLOs, and ensuring all new features are fully instrumented for robust diagnosis.

Improves Go error handling by treating errors as structured data. This utility adds critical context—such as domain, user IDs, stack traces, and machine-readable error codes—to standard Go errors. This capability is vital for enhancing observability, enabling APM tools (like Sentry or Datadog) and on-call engineers to diagnose complex issues quickly without relying on manual log correlation.

This skill guides users through advanced security auditing and best practices for Golang development. It acts as a senior security engineer, focusing on defense in depth by analyzing critical areas like injection patterns, cryptography, secrets management, and authorization flaws. It supports full codebase audits (using STRIDE and DREAD scoring) and precise PR vulnerability reviews, ensuring secure and resilient Go applications.