Skill UI

A structured, multi-phase skill that systematically audits and provides actionable fixes for all four Lighthouse pillars: Performance, Accessibility, Best Practices, and SEO. It analyzes Core Web Vitals, render-blocking resources, security headers, and ARIA compliance to significantly boost site speed and quality.

This skill generates a formal Architecture Decision Record (ADR) following industry-standard formats. It guides users through documenting the full rationale behind significant technical choices, ensuring that the context, alternatives considered, chosen option, and resulting trade-offs are all captured. Ideal for maintaining architectural integrity and knowledge transfer within engineering teams.

This skill generates a comprehensive capacity plan document for any service. It assists technical teams in proactively managing infrastructure by modeling traffic growth, forecasting resource utilization (CPU, memory, connections), projecting costs, and defining clear scaling strategies. Use this when assessing current resource headroom, planning for seasonal peaks, or defining a long-term infrastructure action roadmap.

Generates a comprehensive, structured, and blameless incident postmortem document. This skill is designed for Root Cause Analysis (RCA), P1/P2 incident reviews, and outage reports, ensuring the focus remains on systemic gaps and preventative action items rather than individual blame. It guides the user through gathering all necessary details, from the timeline and impact to defining concrete action owners and due dates.

This guide helps define a complete observability stack for any service. It systematically covers the Four Golden Signals (latency, traffic, errors, saturation), guiding users to define core metrics, set Service Level Objectives (SLOs), configure actionable alerting rules, and structure comprehensive monitoring dashboards. Essential for establishing robust SRE practices and documenting system health standards.

Generates comprehensive, structured documentation for microservices or internal platforms. This skill covers service identity, architecture context, APIs, SLAs, data classification, and operational runbooks, making it ideal for developer portals, service READMEs, and internal service registries. It ensures new team members can quickly understand how to use and depend on a shared service.

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

This guide details how to establish SAML 2.0 identity federation between on-premises Active Directory (using AD FS or third-party IdP) and Microsoft Entra ID. It covers hybrid identity architectures, configuring federation models (AD FS, PHS, PTA), and implementing the full SAML authentication flow. Essential for extending on-premises authentication authority to cloud resources and maintaining security compliance.

This guide details how to configure Microsoft Entra Privileged Identity Management (PIM) to enforce Zero Trust principles. It converts standing, permanent privileged roles into eligible, time-bound assignments, requiring mandatory justification, MFA, and approval workflows before activation. Ideal for achieving strict role-assignment auditing and comprehensive identity governance in hybrid cloud environments.

A comprehensive guide for conducting memory forensics to extract cached credentials, password hashes, Kerberos tickets, and authentication tokens from Windows memory dumps (LSASS). This technique is crucial during incident response or breach assessment to identify compromised accounts or investigate lateral movement.

This skill deploys Remote Browser Isolation (RBI) as a core component of a Zero Trust security architecture. It implements sophisticated isolation policies utilizing URL categorization, risk-based routing, and Content Disarming and Reconstruction (CDR) for file sanitization. It provides robust data loss prevention controls, effectively mitigating zero-day exploits, phishing, and data exfiltration across isolated web sessions, and integrating with SWG and ZTNA platforms.

A comprehensive guide detailing detection and defense strategies against OAuth token theft, session hijacking, and token replay in Microsoft Entra ID (Azure AD). It covers advanced attacks like Primary Refresh Token (PRT) abuse and Adversary-in-the-Middle (AitM) phishing, and provides actionable steps for configuring Conditional Access and Token Protection policies.