Skill UI

Provides authentication, authorization, encryption, secrets, and hardening patterns for designing secure auth flows, managing tokens, configuring CORS, and implementing best practices around API keys, JWT, OAuth, and rate limiting.

Senior Architect orchestrates architecture decision workflows, generates Mermaid/PlantUML/ASCII diagrams, analyzes dependencies, and evaluates tech stacks to help teams choose scalable systems and document design choices.

This skill provides expertise in building production-grade, scalable data systems and pipelines. It covers the full spectrum of data engineering, including designing robust batch ETL/ELT workflows, implementing real-time streaming architectures (Kafka/Flink), and utilizing modern tools like Airflow, Spark, and dbt. Essential for data architecture design, data lakehouse implementation, and data governance.

Guides senior data scientists through designing controlled experiments, engineering structured features, training ML models, and translating results into decisions using Python, R, SQL, and tools like Scikit-learn, XGBoost, and MLflow.

A comprehensive fullstack development toolkit designed to accelerate project setup and maintain code health. It provides project scaffolding for popular stacks (Next.js, FastAPI, MERN, Django), generating complete boilerplate code, Docker configurations, and environment templates. Furthermore, the Code Quality Analyzer audits existing codebases for critical security vulnerabilities, complexity metrics, and dependency issues, ensuring high standards throughout the development lifecycle. Ideal for new project initiation and routine code auditing.

Toolkit for prompt engineering experts to optimize prompts, evaluate LLM outputs, design agentic workflows, assess RAG quality, and curate few-shot examples across evaluation and orchestration tasks.

A comprehensive toolkit for professional security engineers. It covers the entire security lifecycle, including systematic threat modeling using STRIDE, designing secure architectures based on Zero Trust and Defense-in-Depth, conducting detailed vulnerability assessments (SAST/DAST), and implementing secure coding practices. Ideal for security audits, compliance reviews, and building resilient systems.

A comprehensive collection of diagnostic scripts designed for troubleshooting Sentry integration failures. This bundle collects SDK versions, runtime configuration details (e.g., DSN, environment), and performs network connectivity checks to the Sentry ingest endpoint. Use it when events are not appearing in Sentry, or when systematically diagnosing complex setup issues across Node.js and Python environments.

An expert architect specializing in designing and optimizing service mesh using industry leaders like Istio and Linkerd. This skill provides deep knowledge of cloud-native networking patterns, enabling secure, reliable microservices communication. It covers advanced topics including zero-trust networking, mTLS configuration, sophisticated traffic management (e.g., canary and blue-green deployments), observability integration, and multi-cluster federation.

A specialized methodology for reviewing APIs, configuration schemas, and interfaces to identify 'footguns'—design choices where the path of least resistance leads to insecurity. This analysis focuses on making secure usage the default, covering topics like dangerous defaults, primitive vs. semantic type safety, and insecure algorithm selection. It is crucial for architects and reviewers to prevent developer misuse at the design level.

SimPO (Simple Preference Optimization) is a state-of-the-art, reference-free method designed for aligning Large Language Models (LLMs) using human preference data. It is an efficient alternative to DPO and PPO, notably outperforming DPO without requiring a separate reference model. It is ideal for practitioners who need faster, simpler, and more resource-efficient fine-tuning for preference alignment.

This comprehensive guide outlines the best practices and structured methodology for developing specialized skills for AI coding agents. It provides detailed instructions on integrating Azure SDKs and Microsoft Foundry services, covering crucial topics like secure authentication patterns (DefaultAzureCredential), modular workflow design, and maintaining concise, effective knowledge context for optimal agent performance.