Skill UI

A guided workflow for auditing AWS Lambda, Azure Functions, and GCP Cloud Functions to catch permissive execution roles, exposed secrets, and missing runtime protections before deployment.

Instrument iOS apps with Frida to reverse engineer binaries, inspect Objective-C/Swift runtime flows, extract secrets, and evaluate or bypass security controls during authorized mobile penetration testing.

Hardens managed EKS, AKS, and GKE clusters by enforcing Pod Security Standards, network policies, RBAC scoping, image admission controls, workload identity, and runtime monitoring for cloud-specific IAM integrations.

Harden serverless compute on AWS Lambda, Azure Functions, and Google Cloud Functions by enforcing least-privilege IAM roles, moving secrets into vaults, scanning dependencies, validating inputs, securing function URLs, and monitoring runtimes so injections, credential theft, and supply-chain threats are caught before deployment.

Hono is a tiny, ultrafast web API framework that runs on Cloudflare Workers, Deno, Bun, Node.js and other WinterCG runtimes, ideal for edge APIs, BFFs, and full-stack apps needing TypeScript safety.

Packages a local MCP server into a single distributable MCPB file that bundles its runtime, dependencies, manifest, and install-time config so it can run without requiring Node or Python on the user’s machine while safely accessing local files, apps, and OS APIs.

Turns messy workflows, docs, transcripts, or existing scripts into production-ready cross-platform agent skills by surfacing hidden requirements, generating specs, and validating exports for Claude Code, Copilot CLI, Cursor, and similar runtimes.

Build, run, and debug the current iOS scheme on a booted simulator via XcodeBuildMCP, then interact with the UI, capture screenshots, and collect runtime logs for troubleshooting.

This skill provides a comprehensive audit workflow for diagnosing performance issues in SwiftUI applications. It begins with a code-first review, identifying common performance smells like invalidation storms or layout thrash. If code inspection is insufficient, it guides the user through collecting runtime profiling evidence (e.g., Instruments data) to pinpoint root causes such as janky scrolling, high CPU usage, or memory leaks.

Detects and prevents injection attacks targeting serverless functions by combining static analysis, event mapping, runtime behavior monitoring, and IAM auditing so SOCs can spot poisoned triggers, malicious layers, and privilege escalations across Lambda, Azure, and GCP environments.

Deploys Cilium Tetragon-based eBPF tracing to watch processes, network, file access, and enforce runtime policies while streaming JSON events to SIEM pipelines for Linux hosts or Kubernetes clusters.

Runs context-mode diagnostics by invoking the ctx_doctor MCP or fallback CLI to check runtimes, hooks, plugins, and marketplace versions, then returns results as a markdown checklist for troubleshooting the conversation environment.