Skill UI

A comprehensive strategy for regression testing in AI-assisted development. It focuses on identifying systematic blind spots, such as schema inconsistencies between sandbox and production paths, and integrating automated bug checks into the development workflow. This guide teaches how to build robust, database-free API tests to ensure code quality when AI models contribute to the codebase.

This skill guides the implementation and auditing of advanced container network policies using Calico's specialized CRDs (like GlobalNetworkPolicy and NetworkSet). It enables granular traffic control, zero-trust architectures, and advanced egress filtering based on domain names, which are critical for maintaining strict compliance and isolating workloads across multiple namespaces.

This guide teaches how to implement and audit Google Cloud Platform (GCP) VPC firewall rules using gcloud. It covers creating restrictive ingress and egress rules, enforcing network segmentation using tags and service accounts, and auditing for overly permissive settings. Ideal for compliance, zero-trust architectures, and responding to security findings.

A comprehensive guide detailing how to implement portable Kubernetes NetworkPolicies to enforce zero-trust microsegmentation. Learn to apply default-deny rules, control ingress and egress traffic, and restrict lateral movement between pods and namespaces across various CNI platforms (Calico, Cilium). Ideal for establishing robust security posture and meeting compliance requirements.

A comprehensive guide for performing structured API security testing using Postman. It covers critical OWASP API Security Top 10 vulnerabilities, including BOLA, authentication bypass, and injection flaws. Ideal for building repeatable security regression tests, simulating multi-role user access, and integrating automated validation into CI/CD pipelines via Newman and OWASP ZAP.

This skill reviews code differences (diffs) to identify opportunities for improvement in clarity, reusability, efficiency, and overall quality. It employs multiple specialized sub-agents (e.g., Code Reuse, Efficiency, Quality) to audit changes. It can provide high-confidence, behavior-preserving fixes when requested, ensuring the code adheres to best practices without introducing regressions. Best used when refactoring, cleaning up, or auditing a specific code scope.

Coordinated end-to-end testing workflow that leverages Playwright for browser automation, visual regression comparisons, cross-browser coverage, and CI/CD integration so teams can validate web apps before release.

A comprehensive tool for establishing performance baselines across multiple dimensions. It measures Core Web Vitals (LCP, CLS, INP), API latency (p50, p95, p99), and development build efficiency. Essential for detecting performance regressions before merging code, ensuring stability in CI/CD pipelines, and comparing alternative stack implementations.

Automates comprehensive end-to-end Quality Assurance (QA) for deployed web applications. This skill performs multi-stage testing, including smoke tests, complex user interactions (forms, authentication), visual regression checks across breakpoints, performance monitoring (Core Web Vitals), and WCAG accessibility audits.

This skill monitors for regressions on deployed URLs following deployments, merges, or dependency upgrades. It performs comprehensive checks including HTTP status, console errors, network failures, performance metrics (LCP/CLS/INP), and crucial API endpoint health, ensuring service stability in production or staging environments. Supports quick checks, continuous monitoring, and differential comparison against baselines.

This skill provides expert guidance on treating prompts as first-class infrastructure. It covers prompt registry design, systematic versioning, A/B testing, and building comprehensive evaluation pipelines. It ensures that prompt changes are rigorously tested and deployed safely, preventing quality regressions in production AI features at scale.

Guides systematic root-cause debugging when tests fail, builds break, or behavior unexpectedly changes. It covers stop-the-line discipline, a triage checklist, git bisection for regressions, minimal reproduction, root-cause fixes, regression tests, and end-to-end verification. Ideal for turning confusing errors into reliable recovery workflows.