Skill UI

This skill provides a comprehensive, structured audit of any design system. It assesses component coverage gaps against production UI, monitors design token consistency (color, spacing, typography), evaluates documentation quality, and checks for accessibility compliance. The output includes an overall health score and a prioritized remediation roadmap, making it essential for design leadership and engineering teams maintaining shared component libraries.

Creates comprehensive, actionable disaster recovery (DR) documents for any service or system. It defines critical recovery targets (RTO/RPO), outlines failure scenario runbooks, specifies backup validation procedures, and establishes testing cadences. Use this tool when building site reliability engineering (SRE) practices or preparing for major system failure simulations.

This skill automates a structured Product Management (PM) design review process. It assesses a Figma design against defined product requirements (PRD) and user flows, ensuring functional completeness and readiness for engineering handoff. It checks for requirements coverage, handles edge cases (empty/error/loading states), identifies functional concerns (not aesthetic), and provides a clear, actionable approval status.

This skill guides the planning and structuring of Figma prototypes specifically for usability testing and user research. It helps define the precise scope (in/out scope), specifies every interaction detail (trigger, elements, animations), builds comprehensive flow diagrams, and generates detailed test task scripts. It ensures the prototype is the minimum viable version needed to answer the research questions, preventing scope creep and over-engineering.

This skill generates a comprehensive Technology Radar document following the ThoughtWorks format. It provides a structured framework for an engineering team to evaluate and categorize all significant technologies (tools, languages, platforms, techniques) into four quadrants (Adopt, Trial, Assess, Hold). It helps establish a shared, explicit technology strategy, detailing adoption rationales, decision trails, and maintenance processes for consistent engineering choices.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

Business Email Compromise (BEC) is a sophisticated fraud scheme relying on social engineering. This skill provides comprehensive guidance on detecting and mitigating BEC attacks. It covers using email gateway rules, behavioral analytics, and implementing financial controls to identify impersonation attempts, altered payment details, and urgent fraudulent requests.

This skill details the process of building and maintaining a comprehensive anti-phishing training program. It covers establishing baseline susceptibility assessments, deploying regular, progressive simulations, and providing interactive, role-based learning modules (using platforms like KnowBe4 or Proofpoint). The focus is on measuring and improving the human layer of defense against social engineering and sophisticated phishing attempts, thereby fostering a continuous security culture.

A comprehensive guide detailing the systematic workflow for analyzing malicious Linux ELF binaries. It covers essential techniques including static analysis (using readelf, elftools), dynamic tracing (strace, ltrace), and deep reverse engineering (GDB) of various threats like botnets, cryptominers, and ransomware targeting Linux environments, containers, and cloud infrastructure.

This skill provides expert guidance on design engineering, focusing on UI polish, micro-interactions, and high-craft component decisions. It is ideal for reviewing frontend code (React, CSS, Tailwind) to elevate perceived quality, addressing details like easing, duration, and physical feedback. Use it when subtle detail and refined taste are critical differentiators.

Stratus Red Team is an open-source tool designed for detection engineering and purple teaming. It programmatically detonates granular, documented offensive techniques across major cloud platforms (AWS, Azure, GCP, and Kubernetes). It validates existing security detections (like CloudTrail/GuardDuty) by simulating real attacker activity in a controlled, reversible environment. The tool ensures deterministic lifecycles, guaranteeing that all created resources are cleaned up after testing.

This guide demonstrates how to use the pycti Python client to model complex cyber threat intelligence within the OpenCTI platform. It structures threat actors, intrusion sets, campaigns, and TTPs into a unified STIX 2.1 knowledge graph. The skill is essential for correlating fragmented data from multiple sources (IOCs, reports) into a comprehensive, queryable adversary picture, supporting advanced threat hunting and detection engineering.