Skill UI

This skill provides advanced expertise in Infrastructure as Code (IaC) using Terraform and OpenTofu. It covers designing robust, reusable modules, managing complex multi-cloud state backends, and implementing enterprise-grade CI/CD pipelines. It specializes in governance, Policy-as-Code, and achieving GitOps compliance for full infrastructure automation.

This skill provides a comprehensive framework for designing and reviewing native iOS applications. It covers adherence to Apple's Human Interface Guidelines (HIG), ensuring consistency across layout, typography, safe areas, and system components (e.g., Dynamic Island). Use this when building or reviewing SwiftUI/UIKit code to guarantee the app feels intuitive, highly polished, and genuinely native to the Apple ecosystem.

A comprehensive guide for building robust, production-grade desktop applications using Electron. This skill covers advanced topics including multi-process architecture, mandatory security hardening (contextIsolation, sandbox), secure IPC communication, and best practices for packaging, code signing, and implementing auto-update features.

A specialized tool and workflow for investigating supply chain attacks. It helps security analysts analyze compromised software updates, trojanized binaries, and dependency artifacts by comparing legitimate versions against suspect files. Key functions include binary diffing, identifying injected code, and documenting code signing anomalies to determine the scope of a security breach.

This skill guides implementing robust code signing for software artifacts (binaries, packages, containers). It ensures integrity and authenticity throughout the entire software supply chain. Learn to use traditional methods like GPG and modern, keyless approaches like Sigstore (cosign) to establish trust chains, verify provenance, and meet compliance standards (e.g., SLSA).

This skill guides the implementation of digital signatures using Ed25519, a high-performance cryptographic algorithm based on the Edwards curve. It provides 128-bit security with small keys and signatures, offering significant advantages over RSA and ECDSA, including deterministic signing and side-channel resistance. Learn to generate key pairs, sign documents and code, and verify signatures for robust security controls.

A comprehensive toolset to scaffold, build, sign, and package SwiftPM-based macOS applications entirely without requiring an Xcode project. It guides users through the end-to-end process, including setting up the project, running the app, performing code signing, notarization, and generating update appcasts for robust, reproducible releases.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

This comprehensive guide covers best practices for building robust, production-ready gRPC microservices in Go. It details proper protobuf organization, utilizing interceptors for cross-cutting concerns (logging, auth), implementing graceful shutdowns, handling gRPC status codes, and optimizing client connections with deadlines and retry policies. Essential for engineers designing reliable distributed systems.

This comprehensive guide outlines established best practices for developing robust, scalable, and high-quality enterprise applications using Spring Boot and Java. It covers structuring projects, implementing dependency injection, designing RESTful APIs, managing transactions, securing endpoints, and utilizing advanced testing strategies (Unit, Integration). Ideal for developers aiming for industry-standard code quality.

Guides architects through Dataverse SDK use cases by analyzing requirements, designing data models, selecting integration patterns, and producing production-ready Python code with best practices.

A comprehensive guide covering best practices for Terraform and OpenTofu. It provides structured advice on module hierarchy, directory organization, naming conventions, and advanced testing strategies (including native testing and policy as code). Use this skill when designing, refactoring, or implementing robust Infrastructure as Code (IaC) pipelines and multi-environment deployments.