Skill UI

Automatically scans modern API frameworks (Next.js, Express, FastAPI, Django) to generate comprehensive, ready-to-run test suites. It ensures complete coverage for critical areas including authentication, input validation (boundary/injection), error code matrices, pagination, file uploads, and rate limiting. Ideal for TDD, contract testing, and security audits.

A powerful skill for conducting structured, systematic code reviews for PRs and MRs. It goes beyond basic style checks, performing deep analysis such as blast radius tracing, comprehensive security scanning (SQLi, XSS, secrets), detecting breaking changes in APIs/DB schemas, and calculating test coverage delta. Ideal for reviewing large, complex, or security-sensitive code changes before merging.

Analyzes test coverage gaps by cataloging routes, components, APIs, and existing specs, then builds a coverage matrix, prioritizes missing areas, and recommends follow-up plans or auto-generation for missing tests.

This skill provides a structured workflow for porting existing Semgrep security rules to multiple target languages. It guides users through applicability analysis, test-first rule creation, and validation for each language variant, ensuring consistent and accurate security coverage across polyglot codebases.

Offers testing guidance covering TDD workflows, unit/integration/E2E organization, framework support, mocking strategy, and coverage to help teams deliver reliable, well-structured test suites.

Provision enterprise-grade Playwright Java tests with a Page Object Model scaffold, JUnit 5 workflows, thread-safe parallel runs, Allure reporting, CI-friendly setup, and hybrid API/UI coverage to fix flakes and scale browsers.

A comprehensive guide to writing reliable and maintainable tests for Kotlin projects. This skill covers modern testing patterns using Kotest for various spec styles (FunSpec, BehaviorSpec), MockK for dependency mocking, and enforces TDD principles (RED/GREEN/REFACTOR). Learn how to implement unit tests, property-based testing, and ensure high code coverage with Kover.

Blueprint for B2B lead enrichment that sequences waterfalls, ICP scoring layers, and verification pipelines to maximize coverage, boost intent alignment, and keep cost per verified contact low.

This skill provides a comprehensive method for querying advanced threat intelligence using ATT&CK data. It maps the Tactics, Techniques, and Procedures (TTPs) of specific APT groups into MITRE ATT&CK Navigator layers. Users can build multi-layer heatmaps to identify detection gaps, compare threat coverage, and create structured threat-intel reports for defense engineering.

This skill provides a systematic method to map observed Indicators of Compromise (IOCs) and threat actor TTPs to the global MITRE ATT&CK framework. It guides users in building technique coverage heatmaps using the ATT&CK Navigator, identifying critical detection gaps, and generating actionable threat intelligence reports across Enterprise, Mobile, and ICS domains. Ideal for SOC analysts, threat hunters, and security researchers seeking structured threat analysis.

This system maps advanced persistent threat (APT) group TTPs to the MITRE ATT&CK framework. Utilizing the attackcti library to query STIX/TAXII data, it generates specialized ATT&CK Navigator layer files. It is essential for security analysts to profile threat actors, visualize comprehensive coverage heatmaps, and precisely assess detection gaps against sophisticated adversaries.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.