Skill UI

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.

An expert architect specializing in designing, implementing, and managing complex hybrid and multi-cloud environments. Expertise spans major public clouds (AWS, Azure, GCP), private clouds (OpenStack, VMware), and container platforms (Kubernetes). Focus areas include cross-cloud networking, Infrastructure as Code (IaC) using Terraform, workload optimization, zero-trust security implementation, and FinOps cost management.

A comprehensive guide for safely migrating monolithic or aging codebases. It details incremental modernization strategies, dependency mapping, and the implementation of the Strangler Fig pattern. Learn how to build safety nets using characterization tests, manage rollouts with feature flags, and achieve zero-downtime refactoring to reduce technical debt without business disruption.

A comprehensive toolkit for navigating, optimizing, and managing large monorepos built with JavaScript/TypeScript. It supports industry-leading tools like Turborepo, Nx, pnpm, and Lerna. Key features include cross-package impact analysis, selective builds, remote caching, dependency graph visualization, and structured migrations, ensuring fast, reliable CI/CD pipelines for complex codebases.

This skill provides a structured methodology and tools for investigating sophisticated supply chain attacks. It focuses on detecting trojanized software updates, compromised build pipelines, and hidden dependencies by performing deep binary comparison, code signing verification, and anomaly detection. Use it during incident response to map out intrusion vectors and assess the full scope of a security breach.

An advanced Intrusion Detection System (IDS) module designed for Operational Technology (OT) and ICS/SCADA environments. It monitors Modbus TCP/RTU traffic to detect unauthorized writes, anomalous function codes, malformed frames, and deviations from established communication baselines. Essential for investigating suspicious PLC register modifications and responding to industrial threats.

This tool leverages the Rekall memory forensics framework to conduct deep analysis of memory dumps. It is designed to detect sophisticated threats such as process hollowing, injected code via VAD anomalies, hidden operating system processes, and rootkit presence. It applies key forensic plugins (pslist, malfind, vadinfo) essential for rigorous incident response and malware analysis.

A comprehensive guide for conducting hypothesis-driven threat hunting against supply chain compromises (T1195). This skill focuses on querying SIEM/EDR logs to detect indicators of trojanized software updates, compromised dependencies, unauthorized code modifications, and tampered build artifacts. It is crucial when investigating suspected vendor compromises or scoping a build pipeline breach, requiring advanced knowledge of logging systems and threat intelligence.

This guide details the deployment and usage of OPA Gatekeeper, a powerful Kubernetes admission controller. Gatekeeper enforces custom policies written in Rego using ConstraintTemplates and Constraints. It validates, mutates, or denies resource requests at admission time, ensuring that non-compliant workloads are blocked before scheduling. Ideal for organizations requiring robust, code-based policy enforcement to meet strict security and compliance standards.

A comprehensive tool designed for assessing the security posture of Programmable Logic Controller (PLC) firmware. It specializes in detecting critical vulnerabilities such as hardcoded credentials, undocumented debug interfaces, backdoor functions, and memory corruption flaws. The tool supports analyzing major industrial platforms (Siemens, Allen-Bradley) by performing static and dynamic analysis, and verifying firmware integrity against known-good baselines, adhering to standards like IEC 62443. Use only in authorized lab environments.

This tool monitors Modbus TCP communication within SCADA and ICS environments to detect security anomalies. It performs deep packet inspection, baselines normal communication patterns (e.g., typical function code distribution, register access), and applies statistical analysis to identify unauthorized register writes, reconnaissance attempts, or denial-of-service attacks targeting industrial control devices.

This skill helps users create specialized 'steering documents' or project memory for highly specific domains (e.g., API standards, testing strategies, security patterns). By analyzing the existing codebase and following predefined architectural principles, it synthesizes concise, actionable guides that capture technical patterns, best practices, and domain-specific rules, ensuring project consistency and knowledge retention.