Skill UI

Generates practical and robust CI/CD pipelines by programmatically detecting the project's entire technology stack (language, runtime, tooling). It provides fast baseline setup for GitHub Actions or GitLab CI, ensuring repeatability, environment awareness, and alignment with project dependencies. Ideal for onboarding new repositories, standardizing DevOps workflows, or migrating existing deployment processes.

This skill guides SOC analysts and detection engineers on how to correlate complex, multi-stage attacks within the IBM QRadar SIEM platform. It covers advanced usage of AQL (Ariel Query Language) for deep event investigation, building custom correlation rules (Building Blocks and Offenses), and cross-source data correlation (e.g., auth failures with network flows). It is essential for reducing false positives and improving threat detection accuracy.

A comprehensive skill covering container security vulnerability scanning using Trivy. It detects vulnerabilities in OS packages, language dependencies, IaC misconfigurations, and exposed secrets across container images, Kubernetes manifests, and Git repositories. Features include generating SBOMs (CycloneDX/SPDX) and integrating security gates into CI/CD pipelines for robust supply chain security.

This skill generates standardized, production-ready `mise.toml` configurations. It helps developers standardize runtime versions across mixed-language projects (e.g., Node.js, Python, Go, etc.) and CI/CD pipelines, eliminating the need for multiple legacy version managers like asdf or nvm. Ideal for ensuring reproducible, consistent development environments.

This skill assists in generating robust Behavior Driven Development (BDD) tests. It supports writing feature files using Gherkin syntax (Given/When/Then) and automatically generates corresponding step definitions in multiple languages, including Java, JavaScript, and Ruby. Ideal for structuring and automating end-to-end functional tests.