Skill UI

A comprehensive guide for setting up and maintaining Cursor IDE for enterprise and production use. It covers essential best practices including security hardening, defining project-wide coding rules, optimizing codebase indexing, ensuring data privacy compliance, and standardizing team development workflows. Essential for adopting AI coding tools in a professional environment.

Security workflow that guides from threat modeling through secure design, authentication and input validation, header hardening, encryption, and OWASP defenses for production services.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Helm Chart Builder skill scaffolds production-grade charts, audits security, manages dependencies, and validates values/templates via slash commands for creation, review, and hardening workflows in Kubernetes deployments.

Opinionated Terraform workflow skill that guides module design, state/backend management, provider patterns, security hardening, policy-as-code checks, and CI/CD plan/apply flows so IaC stays modular, compliant, and reliable.

A comprehensive guide to hardening GitHub Actions CI/CD workflows against modern supply chain attacks, credential theft, and privilege escalation. Learn techniques such as pinning actions to immutable SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection from untrusted inputs, and implementing required review gates for secure deployment pipelines. Essential for any project handling production secrets or elevated permissions.

Generates Power Platform custom connectors with MCP integration for Copilot Studio, covering schema generation, JSON-RPC scripts, validation, troubleshooting, OAuth hardening, and CLI guidance for paconn/pac workflows.

Master the design, debugging, and hardening of production-grade GitHub Actions CI/CD pipelines. This skill covers advanced topics including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, secrets management, environment protection, and complex trigger patterns (e.g., workflow_call, schedule, release). Use this to automate complex build, test, and deployment processes.

This skill provides deep security review for GitHub Actions workflow files. It focuses on the unique Actions threat model—identifying vulnerabilities like script injection via ${{ }} interpolation, privilege escalation from triggers (e.g., pull_request_target), and ensuring least-privilege permissions for CI/CD pipelines. Use it to audit, secure, or harden existing workflows, preventing attacks from untrusted inputs and supply chain risks.