Skill UI

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

A practical offensive methodology for Android and iOS app testing. It covers static analysis, Frida/Objection instrumentation, SSL pinning bypass, exported component abuse, insecure storage review, and mobile API reconnaissance for pentest and bug bounty work.

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

This meta-skill runs three essential quality gates (ruff, mypy, and pytest) concurrently against the staged changes. It provides a comprehensive, CI-like check locally, offering a single BLOCK or APPROVE verdict to ensure code readiness before committing. It combines static analysis, type checking, and unit testing into one workflow.

A comprehensive, pre-deployment, defense-in-depth security audit tool for Solidity smart contracts built with Foundry. It combines static analysis (Slither, Aderyn), symbolic execution (Mythril), property-based fuzz testing, and key hygiene checks to proactively detect critical vulnerabilities like reentrancy, access control flaws, and arithmetic bugs before deployment to any EVM chain.

Provides a comprehensive workflow and tooling (GuardDog) to triage npm packages and dependency trees for signs of malicious activity. It focuses on static analysis of install scripts, detecting credential exfiltration, reverse shells, and worming behavior, thereby safeguarding against software supply-chain attacks.

This technique audits user interaction flows (like button clicks) to detect subtle bugs that static analysis often misses. It specifically tracks the full sequence of state changes, identifying instances where later actions unintentionally cancel, contradict, or leave the UI in an inconsistent state due to state store side effects or race conditions. Ideal for debugging complex state management architectures (Redux, Zustand).

A comprehensive pipeline designed for Laravel projects to ensure code quality and stability before deployment. It systematically executes environment checks, linting, static analysis, full testing with coverage, security audits, migration validation, and cache preparation. Essential for robust CI/CD pipelines and pre-Pull Request validation.

This comprehensive guide outlines a multi-stage verification pipeline for Quarkus applications. It covers build artifacts, static analysis (Checkstyle, SonarQube, PMD), comprehensive testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native compilation, and performance testing (K6). Use this before PRs or deployments to ensure code quality and stability.

A comprehensive CI/CD quality gate checklist for Spring Boot projects. It guides developers through mandatory steps including building, static analysis (SpotBugs, PMD), running unit/integration tests, measuring code coverage, performing security scans (OWASP), and reviewing diffs before merging or deploying.