Skill UI

A risk-paranoid, mandatory review process designed to interrogate any plan that touches sensitive customer data, regulatory compliance, or production access. It forces consideration of critical security pillars including STRIDE threat modeling, blast radius quantification, detection mechanisms (MTTD), incident response runbooks, regulatory notification windows, and third-party vendor security posture. Essential before deploying features handling PII, PHI, or before compliance audits (SOC 2, HIPAA, GDPR).

This skill facilitates a rigorous, documentation-anchored design review session. It challenges a proposed plan by cross-referencing it against the project's established domain glossary (CONTEXT.md), historical architectural decisions (ADRs), and the current codebase. It forces the user to resolve ambiguities, define precise terminology, and validate design trade-offs using concrete scenarios, ensuring all decisions are captured and documented inline.

Comprehensive skill for managing the KubeSphere ServiceMesh extension, integrating Istio, Kiali, and Jaeger. It provides full lifecycle management, including installation, uninstallation, and detailed status checking. Users can define advanced traffic governance policies (like canary or blue-green deployments) and troubleshoot microservice connectivity, utilizing features such as traffic mirroring and circuit breaking for composed applications.

This skill provides comprehensive auditing of Fabric and Power BI tenant settings against a curated governance baseline. It detects configuration 'drift,' enumerates delegated overrides across capacity, domains, and workspaces, and investigates associated Entra security groups. It translates complex API findings into grounded, actionable discussions, helping users understand functional consequences and risks.

This skill generates a formal Architecture Decision Record (ADR) following industry-standard formats. It guides users through documenting the full rationale behind significant technical choices, ensuring that the context, alternatives considered, chosen option, and resulting trade-offs are all captured. Ideal for maintaining architectural integrity and knowledge transfer within engineering teams.

This skill generates a comprehensive capacity plan document for any service. It assists technical teams in proactively managing infrastructure by modeling traffic growth, forecasting resource utilization (CPU, memory, connections), projecting costs, and defining clear scaling strategies. Use this when assessing current resource headroom, planning for seasonal peaks, or defining a long-term infrastructure action roadmap.

Generates a comprehensive, structured, and blameless incident postmortem document. This skill is designed for Root Cause Analysis (RCA), P1/P2 incident reviews, and outage reports, ensuring the focus remains on systemic gaps and preventative action items rather than individual blame. It guides the user through gathering all necessary details, from the timeline and impact to defining concrete action owners and due dates.

This skill generates comprehensive, step-by-step operational runbooks for services, incidents, and deployments. It structures guides for on-call engineers, providing clear overviews, prerequisites, precise commands, rollback steps, troubleshooting tables, and escalation paths, ensuring continuity under pressure.

This skill guides the creation of a comprehensive Service Level Objective (SLO) document. It helps define Service Level Indicators (SLIs) by identifying critical user journeys and measuring key metrics like success rate and latency. It calculates the allowed "error budget" and establishes a burn rate policy to maintain service reliability while enabling feature velocity and principled trade-offs.

A comprehensive skill for detecting and analyzing malicious behavior in mobile applications (Android/iOS). It employs multi-layered security analysis, including static indicator checking (permissions, manifest), dynamic instrumentation (Frida), network traffic monitoring, and automated scanning (MobSF). Use this skill when investigating suspicious apps for data exfiltration, C2 communication, or unauthorized access.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.

This framework provides comprehensive detection capabilities for compromised cloud credentials across major platforms including AWS, Azure, and GCP. It analyzes critical threat indicators such as anomalous API activity, impossible travel patterns (impossible login locations), and unauthorized resource provisioning. Designed for incident response, security monitoring, and building robust detection rules to mitigate account takeover and credential abuse.