Skill UI

Guides diagnosing Buttercup CRS Kubernetes issues across the crs namespace by triaging pod states, analyzing logs, checking resource pressure, monitoring Redis, and inspecting queues for cascading failures in services such as redis, build-bot, scheduler, and UI.

Operates as an end-to-end GitHub repository steward, triaging issues, reviewing PRs, analyzing contributor activity, and generating maintenance guidance so the human can simply ask “what’s next” while the agent keeps UX, docs, and backlog healthy.

A comprehensive guide for structured incident response when a Supabase-backed application fails. This runbook guides users through triaging issues, verifying platform status, inspecting connection pools, debugging stuck queries using pg_stat_activity, and analyzing Edge Function logs. Essential for root cause analysis and escalating issues to support.

A comprehensive workflow for performing static and dynamic analysis of malicious PDF documents. It utilizes tools like peepdf, pdfid, and pdf-parser to extract embedded JavaScript, shellcode, and suspicious objects. Ideal for triaging phishing attachments, analyzing exploit documents, and building threat signatures in a controlled forensic environment.

This tool provides a structured methodology for triaging web application security findings generated by DAST and SAST scanners (e.g., Burp Suite, ZAP). It validates true positives, dismisses false positives, and assigns risk ratings using the OWASP Risk Rating Methodology (Risk = Likelihood x Impact). Use it to reduce alert fatigue and prioritize remediation efforts for development teams, ensuring focus on the most critical vulnerabilities.

A comprehensive guide detailing how to configure and manage GitHub's secret scanning feature. This skill covers enabling Secret Protection, setting up push protection to block leaked credentials before they reach the repository, defining custom regex patterns, and providing workflows for triaging alerts and resolving blocked pushes (including using git rebase or bypassing protections). Essential for maintaining secure code repositories and complying with security standards.

Guides Debian Linux experts through triaging package, service, and security problems using apt, systemd, dpkg, and AppArmor-aware checks with follow-up verification at every step.

Manages the complete lifecycle of GitHub issues using a structured, label-based state machine. This skill assists maintainers in triaging incoming reports, determining if an issue is a bug or enhancement, and moving it through defined states (e.g., needs info, ready for agent, wontfix). It ensures systematic workflow management for development projects.

This comprehensive guide covers advanced fuzzing methodology, a core technique in exploit development. Learn how to use coverage-guided fuzzing with powerful tools like AFL++ and libFuzzer to automatically discover critical security vulnerabilities, such as memory corruption bugs. Ideal for setting up robust fuzz campaigns, optimizing corpus generation, and triaging complex vulnerability outputs.

A comprehensive skill for triaging npm packages and dependency lockfiles against supply-chain threats. It utilizes heuristic scanning (GuardDog), manual tarball inspection, and dynamic detonation in isolated environments to detect malicious behavior such as credential exfiltration, reverse shell execution, and self-propagation. Essential for secure code review and CI/CD pipeline gating.

Manage GitHub repositories effectively through issue triaging, PR reviews, and CI/CD workflow debugging. Automate release management and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and developer experience.

This skill automates the entire GitHub Pull Request (PR) review cycle, specifically targeting Copilot Code Review comments. It runs a robust loop: automatically triggering reviews, triaging open threads, dispatching parallel fixes that adhere to repo conventions, committing changes, and resolving comments. It continues iterating until the PR is deemed clean and ready for merge, minimizing manual effort and ensuring high code quality.