Skill UI

Define a Gitleaks-driven secret scanning workflow that spans repo baseline scans, pre-commit hooks, GitHub Actions CI/CD runs, custom detection rules, and remediation steps to stop hard-coded credentials from entering source control.

Explains configuring OWASP ZAP baseline, full, and API scans within CI/CD pipelines, tuning scan policies, interpreting findings, and gating deployments through GitHub Actions or GitLab CI to ensure runtime vulnerabilities are caught before release.

Track running experiments by inspecting remote screen sessions, gathering logs, parsing JSON outputs, and optionally pulling WandB metrics before summarizing baselines, deltas, and costs for Vast.ai or Modal runs.

Analyzes PLC firmware to uncover vulnerabilities such as hardcoded credentials, insecure updates, backdoors, memory corruption, and undocumented debug interfaces. Covers extraction from Siemens, Allen-Bradley, and Schneider platforms, static and dynamic inspection, and baseline comparison to detect tampering.

Generates monthly progress summaries for GEO agency clients by comparing baseline and current audits, highlighting score gains, crawler access, and action-item status to prove value in retention discussions.

Measures page, API, and build performance to establish baselines, compare before/after changes, and guard PRs or releases against regressions.

Conducts STRIDE-A threat modeling on repositories or systems, running either a full single-pass analysis with architectures, DFDs, prioritized findings, and executive assessments, or an incremental update that compares a baseline report to the current code and highlights deltas.

This skill automates the creation and setup of isolated Git worktrees. It ensures safe development environments by following strict directory selection logic, performing mandatory gitignore checks, and automatically installing dependencies (npm, pip, cargo, etc.) and running baseline tests for the new branch. Essential for starting feature development or implementing plans in a clean, verifiable workspace.