Skill UI

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Automates generation and execution of API endpoint tests for REST and GraphQL services, covering CRUD operations, authentication workflows, OpenAPI contract validation, and response verification (status, headers, body).

Automates generation and execution of API endpoint tests for REST and GraphQL services, covering CRUD operations, authentication workflows, OpenAPI contract validation, and response verification (status, headers, body).

A comprehensive guide and implementation patterns for constructing sophisticated autonomous AI agents. It details the core 'Observe-Think-Decide-Act' agent loop, multi-model orchestration strategies, and robust tool design principles (like file I/O and function calling). Ideal for building complex, highly capable agents that require advanced planning, reasoning, and external tool interaction.

A comprehensive guide and implementation patterns for constructing sophisticated autonomous AI agents. It details the core 'Observe-Think-Decide-Act' agent loop, multi-model orchestration strategies, and robust tool design principles (like file I/O and function calling). Ideal for building complex, highly capable agents that require advanced planning, reasoning, and external tool interaction.

A comprehensive guide detailing best practices for creating modern, clean, and highly maintainable user interfaces using Avalonia and Zafiro.Avalonia. It emphasizes leveraging semantic containers, defining shared styles, and utilizing generic components to dramatically reduce XAML redundancy and improve code structure. Learn to adopt patterns like Behaviors over Converters, and prevent deep nesting for optimal developer experience.

Provides expert AWS architecture, security, and implementation guidance backed by MCP tooling, helping teams choose services, migrate workloads, and troubleshoot production issues.

Provides canonical AWS serverless patterns covering Lambda handlers, DynamoDB single-table modeling, CDK infrastructure, and S3 event processing along with anti-patterns and a checklist for production-ready deployments.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

This comprehensive guide covers the best practices for building production-ready, scalable serverless applications on Amazon Web Services (AWS). Learn to leverage core services like Lambda, API Gateway, and DynamoDB, and implement advanced patterns such as event-driven architectures (SQS/SNS). The content emphasizes performance optimization, robust error handling, structured logging, and deploying infrastructure using SAM/CDK.

This comprehensive guide covers the best practices for building production-ready, scalable serverless applications on Amazon Web Services (AWS). Learn to leverage core services like Lambda, API Gateway, and DynamoDB, and implement advanced patterns such as event-driven architectures (SQS/SNS). The content emphasizes performance optimization, robust error handling, structured logging, and deploying infrastructure using SAM/CDK.