Skill UI

Provides offensive security testing methodology, tooling guidance, and workflows for scanning web apps, APIs, dependencies, secrets, and infrastructure to uncover vulnerabilities before attackers exploit them.

A comprehensive guide detailing how to configure and manage GitHub's secret scanning feature. This skill covers enabling Secret Protection, setting up push protection to block leaked credentials before they reach the repository, defining custom regex patterns, and providing workflows for triaging alerts and resolving blocked pushes (including using git rebase or bypassing protections). Essential for maintaining secure code repositories and complying with security standards.

A comprehensive guide to setting up CI/CD pipelines for Adobe API integrations. It covers secure OAuth credential management, unit testing, secret pattern scanning, and rigorous integration testing within GitHub Actions. Essential for maintaining high code quality in Adobe-integrated SaaS products.

A comprehensive guide for implementing robust policy enforcement and security guardrails in HubSpot integrations. This methodology covers secret scanning within CI/CD pipelines to prevent token leaks, utilizes ESLint rules for enforcing modern authentication practices, and leverages TypeScript for compile-time and runtime checks. Use this when setting up secure, scalable, and compliant codebases for HubSpot APIs.

This meta-skill implements a combinator pattern for deep security analysis. It runs three independent gates—policy governance, secret scanning, and audit logging—over a candidate operation. It enforces a strict arbitration rule (Policy DENY > Scanner WARN > ALLOW) to provide a robust, multi-layered verdict, making it ideal for reviewing critical code changes or environment modifications for safety compliance.

Dep handles the entire journey from local code to production deployment. This skill automates containerization using Docker and docker-compose, establishes robust CI/CD pipelines (linting, testing, security scanning, deployment), manages environment variables and secrets, and generates Infrastructure as Code (Terraform/Pulumi) configurations. It ensures observability and provides rollback procedures.

This guide outlines a comprehensive workflow for detecting and preventing the exposure of sensitive AWS credentials (access keys, session tokens) within source code repositories, CI/CD pipelines, and configuration files. It utilizes TruffleHog for deep historical scanning and integrates git-secrets for robust pre-commit hooks, significantly reducing the risk of credential theft and unauthorized account access.

A comprehensive, multi-stage skill designed to simulate a professional Continuous Integration (CI) pipeline. It guides users through critical quality gates, including build verification, type checking, linting, running test suites (with coverage checks), security scanning for secrets, and final diff review. Use this skill before creating a Pull Request or finalizing any significant feature to ensure code robustness and adherence to best practices.