Skill UI

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

This tool facilitates comprehensive purple team exercises by executing Atomic Red Team tests mapped to MITRE ATT&CK techniques. It is primarily used for gap analysis, validating detection coverage (blue team visibility) against specific threat vectors, and building continuous, automated adversarial emulation pipelines in CI/CD environments.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.

Generates a precise, evidence-based installation plan for a project's component catalog (ECC). Instead of loading a full, noisy bundle, this skill analyzes the repository's actual code structure, dependencies, and CI/CD evidence to classify skills, rules, and commands into 'DAILY' (essential) and 'LIBRARY' (referenceable) buckets. It ensures only necessary components are active, optimizing the development environment.

This skill provides comprehensive automation for managing GitHub workflows across the entire development lifecycle. It covers detailed issue triage, PR review status checks, CI/CD failure debugging, official release management, and security monitoring using the GitHub CLI. Ideal for maintaining open-source project health and streamlining team development processes.

Automates CI/CD pipeline setup, from linting and type checks to integration, E2E, security, and deployment stages, plus feedback loops for AI agents and preview deployments.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. This skill covers essential quality gates including unit testing, linting (golangci-lint), static analysis security testing (SAST), vulnerability scanning, dependency management, Docker builds, and automated releases using GoReleaser.

This skill provides comprehensive linting and static analysis for Go projects using golangci-lint. It enforces numerous best practices, checks for common errors, manages configurations via `.golangci.yml`, and supports auto-fixing. Use it during the entire development lifecycle, including setting up CI/CD pipelines, running pre-commit checks, or refactoring large, legacy Go codebases to ensure high code quality and maintain security standards.

This skill acts as a Go modernization engineer, keeping codebases current with the latest Go idioms and standard library improvements. It proactively detects deprecated APIs, outdated patterns, and suggests adopting modern features (like `errors.Is`, `slog`, etc.). It supports both inline, contextual suggestions during active coding, and full-scan review for CI/CD pipelines, ensuring code safety, correctness, and readability.

This skill provides robust mechanisms to verify the integrity of AI agent plugins, tools, and dependencies. It generates deterministic SHA-256 manifests (INTEGRITY.json) for all components, allowing users to detect unauthorized modifications, track provenance, and ensure that deployed assets match their published versions. Use this during CI/CD pipelines, code review, and pre-production promotion to secure the entire agent ecosystem.

This toolkit provides comprehensive automated control over CircleCI CI/CD pipelines via Rube MCP. Users can trigger new builds, monitor workflow and job statuses, retrieve detailed job information, download build artifacts, and extract detailed test metadata. It streamlines complex DevOps operations by managing the entire CI/CD lifecycle.

This comprehensive guide provides a structured set of prompts to manage the entire lifecycle of upgrading a legacy .NET solution. It covers everything from initial project classification and dependency compatibility review to code modernization (e.g., async conversion), updating CI/CD pipelines, and defining robust testing and deployment strategies. Ideal for large-scale migration of older .NET applications to modern frameworks like .NET 8.