Skill UI

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

A comprehensive guide to setting up robust Role-Based Access Control (RBAC) and governance within enterprise data workspaces like Clay. Learn how to define specific user roles (Admin, Member, Viewer), allocate team credit budgets, isolate API keys, and conduct quarterly access audits to maintain data security and operational efficiency for large teams.

This guide details security best practices for integrating with Clay. It covers securing API keys, validating webhook signatures, isolating provider credentials, and redacting sensitive PII data. Essential for maintaining compliance and data integrity in production environments.

A comprehensive guide for engineering teams to manage critical incidents related to Clerk authentication and SaaS platform outages. It covers full incident lifecycle procedures, including initial triage, emergency auth bypass implementation, key rotation, session recovery scripts, and post-incident root cause analysis. Use this when facing production authentication failures or security breaches.

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

Automates cloud security posture assistance within the Security Advanced domain, guiding practitioners through best practices, compliance checks, threat modeling, and prod-ready configurations whenever they mention cloud security posture.

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

A systematic and comprehensive checklist for conducting thorough code reviews. This skill guides reviewers through checking crucial aspects including functionality verification, security vulnerabilities, performance bottlenecks, code maintainability, and test coverage, ensuring high code quality standards.

This skill helps transform code reviews from simple gatekeeping into a powerful knowledge-sharing mechanism. It guides users through systematic analysis of code changes, focusing on correctness, security, performance, and maintainability. Use it when reviewing pull requests, establishing best practices, or mentoring developers to ensure high-quality, robust codebase development.

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

Automates CodeQL database builds, suite selection, and taint-aware scans to surface security and quality issues across supported languages, handling output directories, SARIF results, and extensions in one workflow.