Skill UI

This utility facilitates the end-to-end deployment of Guidewire integrations to the Cloud Platform. It manages the full release lifecycle, including building configuration packages using Gradle, uploading to the Guidewire Cloud Console (GCC), and promoting deployments through various environments (dev, staging, prod). It supports advanced features like zero-downtime releases and robust rollbacks.

A comprehensive guide for safely migrating monolithic or aging codebases. It details incremental modernization strategies, dependency mapping, and the implementation of the Strangler Fig pattern. Learn how to build safety nets using characterization tests, manage rollouts with feature flags, and achieve zero-downtime refactoring to reduce technical debt without business disruption.

This skill specializes in implementing Service Level Objectives (SLOs) and Service Level Indicators (SLIs) to enforce reliability standards. It guides users in designing comprehensive SLO frameworks, calculating error budgets, and building robust monitoring systems. Use this when you need to establish data-driven reliability targets, balance feature velocity with technical health, and align service performance directly with core business objectives.

This skill provides comprehensive expertise for senior database administrators to optimize and manage PostgreSQL databases at an advanced level. Use it for deep query analysis via EXPLAIN ANALYZE, implementing advanced features like JSONB indexing, configuring streaming or logical replication, and maintaining database health through VACUUM tuning and monitoring pg_stat views. Ideal for building highly available, high-performance, and resilient system architectures.

Monitor the operational health of PostHog integrations by tracking critical metrics. This skill checks event ingestion rates, feature flag evaluation latency, and monitors billing volume consumption. It also provides rules for Prometheus/Grafana alerting, ensuring data pipelines remain stable and alerting on potential performance bottlenecks or exceeding API limits.

A comprehensive toolkit for navigating, optimizing, and managing large monorepos built with JavaScript/TypeScript. It supports industry-leading tools like Turborepo, Nx, pnpm, and Lerna. Key features include cross-package impact analysis, selective builds, remote caching, dependency graph visualization, and structured migrations, ensuring fast, reliable CI/CD pipelines for complex codebases.

This comprehensive profiler provides systematic performance analysis for modern applications built with Node.js, Python, and Go. It detects critical bottlenecks across CPU, memory, and I/O dimensions. Key features include generating flamegraphs, analyzing bundle sizes, optimizing database queries (N+1 detection), and running rigorous load tests using k6 and Artillery. It mandates before-and-after measurements to ensure verifiable performance improvements.

This skill provides comprehensive operational controls for long-lived, cloud-hosted agent workloads. It manages the entire lifecycle—from deployment and scaling to observability and security. Features include detailed monitoring (logs, metrics, traces), safety controls (kill switches, least privilege), and robust change management processes (rollout, rollback, auditing). Ideal for mission-critical microservices and background agents.

This comprehensive guide details how to implement robust security hardening measures for LDAP directory services. It specifically addresses critical vulnerabilities like LDAP injection, anonymous binding, and channel binding bypass. Key features include mandatory LDAPS enforcement, granular access control list configuration, and integrating advanced monitoring to ensure the infrastructure meets high compliance standards (e.g., NIST 800-53). Essential for security architects and operations teams.

This guide details deploying Tailscale (or self-hosted Headscale) to create a WireGuard-based zero trust mesh VPN. It establishes encrypted peer-to-peer connections between devices, eliminating the need for traditional VPN servers. Features include identity-aware Access Control Lists (ACLs), subnet routing, and secure connectivity for compliance-driven architectures. Use this when enforcing granular, identity-authenticated access control.

This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.

Explores how to implement AWS IAM Permission Boundaries to cap the maximum permissions granted to users or roles. This advanced security feature allows security teams to safely delegate IAM management to developers for self-service while strictly enforcing the principle of least privilege and preventing privilege escalation in cloud environments.