Skill UI

Guides security-first development with defensive input validation, auth handling, data protection, and OWASP prevention steps for any feature touching external data or sessions.

Guides teams through a final launch-readiness checklist covering code quality, security, performance, documentation, feature flags, staged rollouts, and monitoring to ensure confident production deployments.

Creates a structured spec before coding, covering objectives, commands, structure, style, tests, boundaries, and success criteria so teams surface assumptions and validate each phase before implementation.

This meta-skill provides a comprehensive guide through the entire software development lifecycle (SDLC). It teaches senior-level engineering discipline, covering everything from vague idea refinement and specification design to planning, implementation, testing, code review, and deployment. It emphasizes core behaviors like surfacing assumptions, managing ambiguity, maintaining scope discipline, and enforcing technical simplicity.

Guides multi-axis reviews before merging, checking correctness, readability, architecture, security, and performance while enforcing concise change sizing and descriptive commit messaging to keep PR history clear.

Provides step-by-step techniques for assessing AWS security, covering IAM enumeration, privilege escalation, SSRF metadata attacks, S3/Lambda exploitation, and red-team persistence workflows with recommended tools and commands.

Provides ultra-compact, actionable code review comments whenever someone asks for a PR review, enforcing the `location: problem. fix.` format plus optional severity prefixes.

Guides learners through reconnaissance, scanning, vulnerability analysis, exploitation, and reporting phases of authorized penetration testing, pairing command examples with tool choices and professional deliverables.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

Guides security teams through using Metasploit’s console, modules, payloads, and Meterpreter workflow for authorized penetration tests and post-exploitation procedures.

Structured checklist guiding the planning, scoping, environment prep, tester selection, and reporting phases of penetration tests to keep security assessments thorough and compliant.

Provides quick reference to penetration testing commands for network scanning, exploitation, password cracking, and web testing workflows, helping security professionals run tools like Nmap, Metasploit, Nikto, and SQLMap during assessments.