Skill UI

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

This comprehensive guide provides expertise in conducting ISO 13485 internal audits for medical device Quality Management Systems (QMS). It covers the full audit lifecycle, including risk-based planning, systematic evidence collection, classifying nonconformities (Major/Minor), and managing CAPA verification to ensure regulatory compliance and continuous improvement.

This skill provides comprehensive guidance and tools for end-to-end software release management. It automates critical tasks such as generating changelogs from conventional commits, determining semantic version bumps (Major/Minor/Patch), assessing release readiness, and planning complex deployment workflows (e.g., Git Flow). Ideal for teams adopting robust DevOps practices.

A comprehensive guide for implementing ISO 14971:2019 risk management across the entire medical device lifecycle. Covers planning, hazard identification, risk analysis (FMEA, FTA), risk evaluation, risk control, and post-market surveillance. Essential for achieving regulatory compliance in medical device development.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

This guide provides comprehensive methods for load testing and capacity planning of Vercel serverless deployments. Learn how to use professional tools like k6 and autocannon to simulate realistic traffic spikes, measure latency (P95, P99), analyze cold start impact, and tune concurrency settings (Fluid Compute) to ensure optimal application performance and scalability under heavy load.

A comprehensive guide and workflow for digital forensic investigators to analyze ransomware artifacts. This process involves preserving volatile evidence (memory dumps), identifying the ransomware variant from file extensions and ransom notes, establishing the attack timeline using Prefetch and Event Logs, and extracting critical Indicators of Compromise (IoCs) such as Bitcoin addresses and Tor sites. Essential for incident response and recovery planning.

A comprehensive, NIST/CISA-aligned workflow for structured recovery following a ransomware incident. It covers critical steps including environment isolation, forensic evidence preservation, Active Directory restoration (DSRM, krbtgt reset), backup integrity validation, and phased, dependency-based system rebuild. Essential for post-incident disaster recovery planning.

A comprehensive guide and toolset for load testing HubSpot integrations and planning for high-volume traffic. This resource details HubSpot's specific API rate limits (per-second and daily) and provides k6 scripts and capacity calculators to ensure your application scales reliably before deployment in production.

This guide provides a comprehensive, advanced methodology for red team operations. It covers critical topics such as Operational Security (OPSEC), designing robust C2 infrastructure using redirectors, employing living-off-the-land techniques, mastering lateral movement, establishing persistence, and planning data exfiltration while evading modern defensive systems. Use this to plan complex red team engagements or deeply understand Advanced Persistent Threat (APT) TTPs.

This advanced skill explores offensive reconnaissance techniques focused on defeating modern operating system security boundaries and mitigations. Topics include kernel/user boundary manipulation, sandbox escapes (AppContainer, LPAC), COM/RPC boundary exploitation, hypervisor interactions, and various integrity level bypassing methods. It is essential for planning advanced privilege escalation paths and understanding deep Windows security architecture, including AMSI, WDAC, and ETW manipulation.

A comprehensive guide for simulating a full Software Development Life Cycle (SDLC) using specialized AI roles. It defines protocols for managing cross-functional teams (Dev, QA, DevOps, Product), covering sprint planning, codebase management, bug tracking, and deployment, ensuring context survival across multiple chat sessions.