Skill UI

Provides step-by-step procedures to detect and remediate misconfigured Amazon S3 buckets, including enabling public access blocks, auditing policies and ACLs, enforcing encryption, and automating fixes with AWS Config and Lambda for compliance or incident response scenarios.

Uses dnSpy plus de4dot and ILSpy to reverse-engineer .NET malware, revealing obfuscation, runtime behavior, and embedded configurations for stealers, RATs, and loaders while supporting debugging of managed assemblies.

Use Trivy to scan Docker and OCI images for OS/library CVEs, secrets, misconfigurations, licenses, and SBOM data; integrates with CI/CD pipelines and exports SARIF/JSON/CycloneDX for policy enforcement.

Use Kubesec to analyze Kubernetes YAML/JSON manifests for misconfigurations, privilege escalation risks, and missing controls, delivering scores and remediation hints via CLI, Docker, kubectl plugin, or REST API for DevSecOps and CI/CD pipelines.

Validates Helm chart provenance, scans rendered templates for misconfigurations, enforces pod security contexts, and hardens RBAC/secrets workflows so Kubernetes deployments stay compliant.

Guides penetration testers through identifying CORS misconfigurations on web APIs, validating origin handling, preflight responses, and crafting PoCs to prove sensitive data can be accessed cross-origin during authorized assessments.

Implements end-to-end FIDO2/WebAuthn hardware security key authentication, covering server configuration, registration and authentication ceremonies, YubiKey enrollment, and passkey migration so high-value accounts gain phishing-resistant, passwordless MFA.

Checks AWS, Azure, and GCP configurations for IAM escalation paths, public storage exposure, open security groups, and IaC gaps, providing preventive findings with MITRE mapping for cloud posture management workflows.

Guides idiomatic C# and .NET patterns covering immutability, explicit intent, dependency injection, async usage, configuration binding, result handling, and repository abstractions to build robust, maintainable applications.

This skill focuses on building new API connectors or providers for an existing repository by strictly adhering to the host project's established architectural patterns. It goes beyond basic HTTP calls, requiring alignment with the repository's native standards for connector layout, configuration schemas, authentication models, error handling, and testing frameworks. Use this when integrating a new service while maintaining architectural consistency with the current codebase.

A configuration-driven frontend approach that enforces premium UI rules, deterministic typography, responsive grids, and structured interaction states to override default LLM biases for polished interfaces.

This comprehensive guide details how to properly integrate and configure Firebase within Flutter applications. It covers initial setup using `flutterfire configure`, essential initialization in `main.dart`, handling platform-specific requirements, and advanced techniques for managing multiple app flavors (dev, staging, prod).