Skill UI

Expert in developing complete, high-performance firmware and peripheral drivers for ARM Cortex-M platforms (STM32, Teensy, nRF52). Specializes in low-level hardware interaction, including implementing drivers for I²C, SPI, UART, and managing complex concurrency patterns using FreeRTOS/Zephyr. Provides critical guidance on optimizing for determinism, cache coherency, DMA transfers, and memory barriers to ensure reliable embedded system operation.

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

This guide provides a comprehensive framework for minimizing cloud expenditure on Databricks. It covers identifying cost drivers via system billing tables, implementing cluster policies, utilizing spot instances for batch processing, right-sizing SQL warehouses, and automating the shutdown of idle development clusters. Use it when managing cloud spending or optimizing data platform usage.

A comprehensive guide for managing secrets and environment variables throughout the entire development lifecycle, from local development to production. This skill covers secret leak auditing (detecting committed credentials), implementing robust rotation workflows, and integrating with industry-leading secret stores like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. Essential for hardening CI/CD pipelines and ensuring compliance.

This tool guides the creation of comprehensive, standardized incident response playbooks aligned with industry standards like NIST SP 800-61r3 and SANS PICERL. It structures playbooks covering detection, containment, eradication, recovery, and post-incident activities, including decision trees, RACI matrices, and seamless integration pathways for SOAR platforms. Ideal for maturing an organization's security posture and ensuring compliance.

This guide details the end-to-end process of conducting a sophisticated spearphishing simulation campaign, mirroring real red team adversary techniques. It covers initial OSINT research and pretext development, building weaponized payloads that bypass security controls, setting up robust email infrastructure (SPF/DKIM/DMARC), executing the campaign in waves, and performing detailed post-campaign metrics analysis for comprehensive security reporting.

This skill teaches the comprehensive process of developing precise YARA rules for malware detection. It covers techniques such as identifying unique byte patterns, analyzing strings, and inspecting PE file headers to create robust signatures. Ideal for security analysts performing threat hunting, incident response, and security auditing.

This guide provides a detailed template and directive for generating machine-readable, deterministic implementation plans. It is designed for complex software development tasks, such as adding new features, refactoring existing code, or designing system architecture. The output ensures that all steps are atomic, measurable, and structured for autonomous execution by AI agents or human teams, minimizing ambiguity and dependency.

This guide outlines best practices for configuring and securing Adobe API access across Development, Staging, and Production environments. It details the use of separate Developer Console projects, implementing least-privilege OAuth scopes, and integrating robust secret management solutions (GCP Secret Manager, AWS Secrets Manager, HashiCorp Vault) into CI/CD pipelines for secure, scalable deployments.

This skill guides the secure configuration of Figma API access across development, staging, and production environments. It details best practices for managing separate API tokens (PATs), file keys, and cache settings. The focus is on implementing robust environment guards and utilizing secret management solutions to prevent cross-environment data leakage and accidental operations.

This guide details how to configure Grammarly API integration across multiple environments (Development, Staging, and Production). It ensures API credentials are isolated, style guides are managed per tier, and rate limits are respected. It provides setup instructions for mocking, sandbox testing, and robust deployment workflows.

This guide provides a comprehensive strategy for configuring Klaviyo across development, staging, and production environments. It covers best practices for using separate API keys, implementing robust environment detection logic (like reading NODE_ENV), and utilizing secret management solutions (AWS/GCP/Vault). Crucially, it teaches how to implement 'guards' to prevent accidental real-world actions, such as sending live emails or deleting data, in non-production environments, ensuring data integrity and smooth CI/CD deployment.