Skill UI

Grype is an open-source vulnerability scanner from Anchore. It inspects container images, filesystems, and SBOMs for known CVEs. It leverages Syft-generated SBOMs to match packages against multiple vulnerability databases (NVD, GitHub Advisories). Use it for security assessments, auditing, and integrating into CI/CD pipelines to enforce vulnerability standards and manage supply chain risks.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.

A comprehensive guide for building or reviewing SwiftUI User Interfaces that utilize the modern Liquid Glass aesthetic. This skill focuses on correctly implementing native Apple APIs (like `glassEffect` and `GlassEffectContainer`) while ensuring proper fallback mechanisms, modifier ordering, and performance for iOS 26+ devices. Ideal for adopting cutting-edge iOS design patterns.

This guide provides comprehensive testing patterns for C# and .NET applications. It covers best practices using xUnit, FluentAssertions, and advanced techniques like mocking (NSubstitute/Moq), parameterized testing, and full integration testing using Testcontainers and WebApplicationFactory. Ideal for improving test quality, coverage, and developing robust, maintainable codebases.

A type-safe dependency injection toolkit for Go, enabling robust and maintainable application architecture. It manages service containers, handling service lifecycles (Lazy, Eager, Transient), scoped services, and dependency resolution. Ideal for refactoring manual constructor injection into a structured DI system in Go projects.

This comprehensive template and guide facilitate the containerization of ASP.NET Core applications. It provides a structured prompt and checklist to ensure that the resulting Dockerfile adheres to industry best practices for performance, security, and maintainability when running on Linux containers. It covers all necessary aspects, including dependency management, port exposure, build stages, and custom configuration.

This comprehensive guide outlines best practices for developing high-quality, idiomatic, and maintainable enterprise applications using Kotlin and Spring Boot. It covers architectural patterns, dependency injection using primary constructors, managing state with data classes, implementing robust RESTful APIs, handling transactions, and leveraging Kotlin features like null safety and Coroutines for asynchronous programming. It also provides guidance on modern testing strategies (Kotest, Testcontainers).

Aspire is a code-first polyglot toolchain that orchestrates containers, executables, and cloud resources through an AppHost project, guiding creation, debugging, configuration, deployment, and troubleshooting for distributed applications across languages.

Helps produce Dockerfiles and a detailed containerization plan for ASP.NET .NET Framework projects running in Windows containers, covering configuration settings, IIS, dependencies, and deployment steps.

This comprehensive guide provides a complete, step-by-step workflow for setting up a modern Spring Boot Java project from scratch. It covers downloading the project template, configuring multiple data sources (PostgreSQL, Redis, MongoDB), integrating API documentation (SpringDoc), and orchestrating a full, containerized service environment using Docker Compose. Ideal for complex, enterprise-level application development.

Installs npm packages inside virtiofs-mounted Docker workspaces by copying package files to a container-local ext4 directory, running npm ci there, and symlinking node_modules back so native binaries avoid virtiofs crashes.

Provides an expert Spring Boot 4 testing guide that explains the test pyramid, slice annotations, AssertJ-centric assertions, MockMvcTester, RestTestClient, Testcontainers, and practical coverage goals.